diff --git a/src/man/firejail.txt b/src/man/firejail.txt index fd1d4a6be..07939b6d5 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt @@ -92,20 +92,6 @@ $ firejail --allusers .TP \fB\-\-apparmor Enable AppArmor confinement. For more information, please see \fBAPPARMOR\fR section below. -.TP -\fB\-\-appimage -Sandbox an AppImage (https://appimage.org/) application. If the sandbox is started as a -regular user, default seccomp and capabilities filters are enabled. -.br - -.br -Example: -.br -$ firejail --appimage krita-3.0-x86_64.appimage -.br -$ firejail --appimage --private krita-3.0-x86_64.appimage -.br -$ firejail --appimage --net=none --x11 krita-3.0-x86_64.appimage .TP \fB\-\-apparmor.print=name|pid @@ -121,6 +107,21 @@ $ firejail \-\-apparmor.print=browser .br AppArmor: firejail-default enforce +.TP +\fB\-\-appimage +Sandbox an AppImage (https://appimage.org/) application. If the sandbox is started as a +regular user, default seccomp and capabilities filters are enabled. +.br + +.br +Example: +.br +$ firejail --appimage krita-3.0-x86_64.appimage +.br +$ firejail --appimage --private krita-3.0-x86_64.appimage +.br +$ firejail --appimage --net=none --x11 krita-3.0-x86_64.appimage + .TP \fB\-\-bandwidth=name|pid Set bandwidth limits for the sandbox identified by name or PID, see \fBTRAFFIC SHAPING\fR section for more details. diff --git a/status b/status index 3f1a4e7de..c7d686018 100644 --- a/status +++ b/status @@ -16,12 +16,10 @@ todo Mar 23: mount runtime seccomp files read-only Jan 13: fix parent death signal todo: Sort items alphabetically in man firejail #2479, Feb 26 -todo: Alphabetical ordering of firecfg.config #2544, Mar 8 Mar 13: Fix incorrect parsing of --keep-var-tmp command #2587 Mar 13: Avoid including globals.local twice, #2586 Mar 10: fix --list reporting for sandboxes using --x11=none; to be ported Mar 10 Mar 10: checking for invalid chars in profile filename before any other proce… -todo: documentation update - Feb 23 Feb 6: strncmp byte count fixes Jan 19: disallow zero seconds timeout