make the firejail blacklist configurable

This commit is contained in:
Pig Monkey 2016-11-07 19:18:26 -08:00
parent 163baf8f34
commit ac7bfb15be
4 changed files with 25 additions and 1 deletions

View file

@ -96,6 +96,13 @@ script looks for a profile with the same name in `~/.config/firejail`. If one
is not found, it will create a profile that simply includes the system profile,
as in the third example above. It will not modify any existing user profiles.
### Blacklisting
The `firejail.blacklist` variable is used to generate a list of blacklisted
files and directories at `/usr/local/etc/firejail/disable-more.inc`. This file
is included in most of the provided security profiles, causing those locations
to be inaccessible to jailed programs.
## MAC Spoofing
By default, the MAC address of all network interfaces is spoofed at boot,