summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--bubblewrap.c1
-rw-r--r--bwrap.xml6
-rw-r--r--completions/bash/bwrap11
3 files changed, 15 insertions, 3 deletions
diff --git a/bubblewrap.c b/bubblewrap.c
index 6225330..fc2edbb 100644
--- a/bubblewrap.c
+++ b/bubblewrap.c
@@ -278,6 +278,7 @@ usage (int ecode, FILE *out)
" --cap-add CAP Add cap CAP when running as privileged user\n"
" --cap-drop CAP Drop cap CAP when running as privileged user\n"
" --perms OCTAL Set permissions of next argument (--bind-data, --file, etc.)\n"
+ " --chmod OCTAL PATH Change permissions of PATH (must already exist)\n"
);
exit (ecode);
}
diff --git a/bwrap.xml b/bwrap.xml
index f56f6ef..94107ad 100644
--- a/bwrap.xml
+++ b/bwrap.xml
@@ -172,6 +172,12 @@
<term><option>--unsetenv <arg choice="plain">VAR</arg></option></term>
<listitem><para>Unset an environment variable</para></listitem>
</varlistentry>
+ <varlistentry>
+ <term><option>--clearenv</option></term>
+ <listitem><para>Unset all environment variables, except for
+ <envar>PWD</envar> and any that are subsequently set by
+ <option>--setenv</option></para></listitem>
+ </varlistentry>
</variablelist>
<para>Options for monitoring the sandbox from the outside:</para>
<variablelist>
diff --git a/completions/bash/bwrap b/completions/bash/bwrap
index e43b005..4ca0c26 100644
--- a/completions/bash/bwrap
+++ b/completions/bash/bwrap
@@ -7,22 +7,25 @@ _bwrap() {
local cur prev words cword
_init_completion || return
+ # Please keep sorted in LC_ALL=C order
local boolean_options="
--as-pid-1
+ --clearenv
--help
--new-session
+ --unshare-all
--unshare-cgroup
--unshare-cgroup-try
- --unshare-user
- --unshare-user-try
- --unshare-all
--unshare-ipc
--unshare-net
--unshare-pid
+ --unshare-user
+ --unshare-user-try
--unshare-uts
--version
"
+ # Please keep sorted in LC_ALL=C order
local options_with_args="
$boolean_optons
--args
@@ -32,6 +35,7 @@ _bwrap() {
--cap-add
--cap-drop
--chdir
+ --chmod
--dev
--dev-bind
--die-with-parent
@@ -43,6 +47,7 @@ _bwrap() {
--hostname
--info-fd
--lock-file
+ --perms
--proc
--remount-ro
--ro-bind