Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mention that host, host-os, host-etc doesn't allow subpaths #453

Closed
wants to merge 1 commit into from
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 4 additions & 3 deletions docs/sandbox-permissions-reference.rst
Original file line number Diff line number Diff line change
Expand Up @@ -36,6 +36,7 @@ be added to ``--filesystem=``:
==================== ======================================================== ===================================================
``host`` Access all files [#f3]_
``host-etc`` Access all files in /etc
``host-os`` Access to host operating system's libraries, executables Mounted in ``/run/host`` inside the sandbox
``home`` Access the home directory
``/some/dir`` Access an arbitrary path [#f4]_ [#f5]_
``~/some/dir`` Access an arbitrary path relative to the home directory
Expand All @@ -54,9 +55,9 @@ be added to ``--filesystem=``:
``xdg-run/path`` Access subdirectories of the XDG runtime directory ``$XDG_RUNTIME_DIR/path`` (``/run/user/$UID/path``)
==================== ======================================================== ===================================================

Paths can be added to all the above filesystem options. For example,
``--filesystem=xdg-documents/path``. The following permission options can
also be added:
Except ``host, host-etc, host-os`` paths can be added to all the above
filesystem options. For example, ``--filesystem=xdg-documents/path``.
The following permission options can also be added:

- ``:ro`` - read-only access
- ``:rw`` - read/write access (this is the default)
Expand Down
Loading