FIREJAIL-CONFIG(5)

NAME
firejail.config - Firejail run time configuration file

DESCRIPTION
/etc/firejail/firejail.config is the system-wide configuration file for Firejail. It allows the system administrator to enable or disable a number of features and Linux kernel security technologies used by Firejail sandbox. The file contains keyword-argument pairs, one per line. Use 'yes' or 'no' as configuration values. Note that some of these features can also be enabled or disabled at compile time. Most features are enabled by default both at compile time and at run time.

bind
    Enable or disable bind support, default enabled.

chroot
    Enable or disable chroot support, default enabled.

file-transfer
    Enable or disable file transfer support, default enabled.

network
    Enable or disable networking features, default enabled.

restricted-network
    Enable or disable restricted network support, default disabled. If enabled, networking features should also be enabled (network yes). Restricted networking grants access to --interface, --net=ethXXX and --netfilter only to root user. Regular users are only allowed --net=none.

secomp
    Enable or disable seccomp support, default enabled.

userns
    Enable or disable user namespace support, default enabled.

x11 Enable or disable X11 sandboxing support, default enabled.

force-nonewprivs
    Force use of nonewprivs. This mitigates the possibility of a user abusing firejail's features to trick a privileged (suid or file capabilities) process into loading code or configuration that is partially under their control. Default disabled.

xephyr-screen
    Screen size for --x11=xephyr, default 800x600. Run /usr/bin/xrandr for a full list of resolutions available on your specific setup. Examples:
    xephyr-screen 640x480
    xephyr-screen 800x600
    xephyr-screen 1024x768
    xephyr-screen 1280x1024

FILES
/etc/firejail/firejail.config

LICENSE
Firejail is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

Homepage: http://firejail.wordpress.com

SEE ALSO
firejail(1), firemon(1), firecfg(1), firejail-profile(5) firejail-login(5)