netblue30 / firejail

Linux namespaces and seccomp-bpf sandbox

Home Page:https://firejail.wordpress.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Mention built-in blacklists in man pages.

amano-kenji opened this issue · comments

Description

There are hidden blacklists like /sys/module and /sys/fs.

It took a while to figure out that zfs required access to /sys/module which firejail quietly blacklisted.

Man pages should mention that --debug-blacklist can reveal those hidden blacklists.