1FIRECFG(1) firecfg man page FIRECFG(1)
2
6 Firecfg - Desktop integration utility for Firejail software.
7
9 firecfg [OPTIONS]
10
12 Firecfg is the desktop integration utility for Firejail sandbox. It
13 allows the user to sandbox applications automatically by clicking on
14 desktop manager icons and menus.
15 The integration covers:
17 - programs started in a terminal - typing "firefox" would be
19 enough to start a sandboxed Firefox browser
20 - programs started by clicking on desktop manager menus - all
22 major desktop managers are supported
23 - programs started by clicking on file icons in file manager -
25 only Cinnamon, KDE, LXDE/LXQT, MATE and XFCE desktop managers
26 are supported in this moment
27 To set it up, run "sudo firecfg" after installing Firejail software.
29 The same command should also be run after installing new programs. If
30 the program is supported by Firejail, the symbolic link in
31 /usr/local/bin will be created. For a full list of programs supported
32 by default run "cat /usr/lib/firejail/firecfg.config".
33 For user-driven manual integration, see DESKTOP INTEGRATION section in
35 man 1 firejail.
36
38 The following actions are implemented by default by running sudo
39 firecfg:
40 - set or update the symbolic links for desktop integration;
42 - add the current user to Firejail user access database (firecfg
44 --add-users);
45 -fix desktop files in $HOME/.local/share/applications/ (firecfg
47 --fix).
48
51 --add-users user [user]
52 Add the list of users to Firejail user access database.
53 Example:
55 $ sudo firecfg --add-users dustin lucas mike eleven
56 --clean
59 Remove all firejail symbolic links.
60 --fix Fix .desktop files. Some .desktop files use full path to exe‐
63 cutable. Firecfg will check .desktop files in /usr/share/appli‐
64 cations/, replace full path by name if it is in PATH, and write
65 result to $HOME/.local/share/applications/. This action is done
66 by default when running "sudo firecfg". We have it as a separate
67 option for regular users.
68 --fix-sound
71 Create a proper ~/.config/pulse/client.conf file without shm
72 support. On some PulseAudio versions, shared memory support
73 (shm) breaks the process ID namespace. PulseAudio software was
74 designed a long time ago, and the introduction of PID namespace
75 in Linux kernel breaks their design. This was reportedly fixed
76 in PulseAudio version 9. If you have sound problems on your sys‐
77 tem, run "firecfg --fix-sound" command in a terminal, followed
78 by logout/login in order to apply the changes.
79 --debug
81 Print debug messages.
82 -?, --help
84 Print options end exit.
85 --list List all firejail symbolic links
87 --version
89 Print program version and exit.
90 Example:
94 $ sudo firecfg
96 /usr/local/bin/firefox created
97 /usr/local/bin/vlc created
98 [...]
99 $ firecfg --list
100 /usr/local/bin/firefox
101 /usr/local/bin/vlc
102 [...]
103 $ sudo firecfg --clean
104 /usr/local/bin/firefox removed
105 /usr/local/bin/vlc removed
106 [...]
107
111 This program is free software; you can redistribute it and/or modify it
112 under the terms of the GNU General Public License as published by the
113 Free Software Foundation; either version 2 of the License, or (at your
114 option) any later version.
115 Homepage: https://firejail.wordpress.com
117
119 firejail(1), firemon(1), firejail-profile(5), firejail-login(5) fire‐
120 jail-users(5)
1210.9.57 Jul 2019 FIRECFG(1)