Skip to content

Commit

Permalink
Update firejail-welcome.sh
Browse files Browse the repository at this point in the history
typos, spelling and other fixes. thanks @reinerh for all these
  • Loading branch information
rusty-snake committed Dec 12, 2020
1 parent e8d3127 commit ffa82e0
Showing 1 changed file with 20 additions and 11 deletions.
31 changes: 20 additions & 11 deletions contrib/firejail-welcome.sh
Original file line number Diff line number Diff line change
@@ -1,9 +1,18 @@
#!/bin/bash

# This file is part of Firejail project
# Copyright (C) 2014-2020 Firejail Authors
# Copyright (C) 2020 Firejail Authors
# License GPL v2

if ! command -v zenity >/dev/null; then
echo "Please install zenity."
exit 1
fi
if ! command -v sudo >/dev/null; then
echo "Please install sudo."
exit 1
fi

export LANG=en_US.UTF8

zenity --title=firejail-welcome.sh --text-info --width=750 --height=500 <<EOM
Expand All @@ -12,22 +21,22 @@ Welcome to firejail!
This is a quick setup guide for newbies.
Profiles for programs can be found in /etc/firejail. Own customizations should go in a file named
<proile-name>.local in ~/.config/firejal.
<profile-name>.local in ~/.config/firejal.
Firejails own configuration can be found at /etc/firejail/firejail.config.
Firejail's own configuration can be found at /etc/firejail/firejail.config.
Please note that running this script a second time can set new options, but does not unset options
set in a previous run.
Webiste: https://firejail.wordpress.com
Website: https://firejail.wordpress.com
Bug-Tracker: https://github.com/netblue30/firejail/issues
Documentation:
- https://github.com/netblue30/firejail/wiki
- https://github.com/netblue30/firejail/wiki/Frequently-Asked-Questions
- https://firejail.wordpress.com/documentation-2
- man:firejail(1) and man:firejail-profile(5)
PS: If you have any improvements for this script, open a issues or pull request.
PS: If you have any improvements for this script, open an issue or pull request.
EOM
[[ $? -eq 1 ]] && exit 0

Expand All @@ -40,26 +49,26 @@ EOM
read -r -d $'\0' MSG_Q_BROWSER_ALLOW_DRM <<EOM
<big><b>Should browsers be able to play DRM content?</b></big>
\$HOME is noexec,nodev,nosuid by default for the most sandboxes. This means that executing ELFs which are located in \$HOME,
\$HOME is noexec,nodev,nosuid by default for the most sandboxes. This means that executing programs which are located in \$HOME,
is forbidden, the setuid attribute on files is ignored and device files inside \$HOME don't work. Browsers install proprietary
DRM plug-ins such as Widevine under \$HOME by default. In order to use them, \$HOME must be mounted exec inside the sandbox to
allow there execution. Clearly, this may help an attacker to start malicious code.
allow their execution. Clearly, this may help an attacker to start malicious code.
NOTE: Other software written in an interpreter language such as bash, python or java can always started from \$HOME.
NOTE: Other software written in an interpreter language such as bash, python or java can always be started from \$HOME.
TIPP: If <tt>/home</tt> has its own partition, you can mount it <tt>nodev,nosuid</tt> for all programs.
HINT: If <tt>/home</tt> has its own partition, you can mount it <tt>nodev,nosuid</tt> for all programs.
EOM

read -r -d $'\0' MSG_L_ADVANCED_OPTIONS <<EOM
You maybe want to set some of these advanced options.
EOM

read -r -d $'\0' MSG_Q_RUN_FIRECFG <<EOM
<big><b>Should the most programs started in firejail by default?</b></big>
<big><b>Should most programs be started in firejail by default?</b></big>
EOM

read -r -d $'\0' MSG_I_ROOT_REQUIRED <<EOM
In order to apply these changes, root right are required.
In order to apply these changes, root privileges are required.
You will now be asked to enter your password.
EOM

Expand Down

0 comments on commit ffa82e0

Please sign in to comment.