mkdir/mkfile man pages

RELNOTES

@@ -1,6 +1,7 @@
 firejail (0.9.65) baseline; urgency=low
  * filtering environment variables
  * zsh completion
+ * --mkdir, --mkfile
  * new profiles: vmware-view, display-im6.q16, ipcalc, ipcalc-ng
  * ebook-convert, ebook-edit, ebook-meta, ebook-polish, lzop
  * gget

src/firejail/usage.c

@@ -125,6 +125,8 @@ static char *usage_str =
  " --machine-id - preserve /etc/machine-id\n"
  " --memory-deny-write-execute - seccomp filter to block attempts to create\n"
  "\tmemory mappings that are both writable and executable.\n"
+ " --mkdir=dirname - create a directory.\n"
+ " --mkfile=filename - create a file.\n"
 #ifdef HAVE_NETWORK
  " --mtu=number - set interface MTU.\n"
 #endif
@@ -246,8 +248,6 @@ static char *usage_str =
 #ifdef HAVE_WHITELIST
  " --whitelist=filename - whitelist directory or file.\n"
 #endif
- " --mkdir=dirname - create a directory.\n"
- " --mkfile=filename - create a file.\n"
  " --writable-etc - /etc directory is mounted read-write.\n"
  " --writable-run-user - allow access to /run/user/$UID/systemd and\n"
  "\t/run/user/$UID/gnupg.\n"

src/firejail/util.c

@@ -400,6 +400,8 @@ void touch_file_as_user(const char *fname, mode_t mode) {
  SET_PERMS_STREAM(fp, -1, -1, mode);
  fclose(fp);
  }
+ else
+ fwarning("cannot create %s\n", fname);
 #ifdef HAVE_GCOV
  __gcov_flush();
 #endif

src/man/firejail.txt

@@ -1104,6 +1104,26 @@ Example:
 .br
 $ firejail \-\-machine-id
 
+.TP
+\fB\-\-mkdir=dirname
+Create a directory in user home. Parent directories are created as needed.
+.br
+
+.br
+Example:
+.br
+$ firejail --mkdir=~/work/project
+
+.TP
+\fB\-\-mkfile=filename
+Create an empty file in user home.
+.br
+
+.br
+Example:
+.br
+$ firejail --mkfile=~/work/project/readme
+
 .TP
 \fB\-\-memory-deny-write-execute
 Install a seccomp filter to block attempts to create memory mappings