firejail-login5

Overview

/etc/firejail/login.users file describes additional arguments passed to the firejail executable upon user logging into a Firejail restricted shell. Each user entry in the file consists of a user name followed by the arguments passed to firejail. The format is as follows:

user_name: arguments

Example:

netblue: --net=none --protocol=unix

Wildcard patterns are accepted in the user name field:

user*: --private

Restricted shell

To configure a restricted shell, replace /bin/bash with /usr/bin/firejail in the /etc/passwd file for each user that needs to be restricted. Alternatively, you can specify /usr/bin/firejail using the `adduser` or `usermod` commands:

adduser --shell /usr/bin/firejail username
usermod --shell /usr/bin/firejail username

Files

/etc/firejail/login.users