In the section of the documentation discussing security, one line includes “local” in the address and the other does not. The command ```
/usr/bin/firejail --writable-var /usr/bin/ffmpeg “$@”
Is missing “local”. Is this correct?
Hello,
I might be wrong but I guess the documentation is correct.
Standard softwares are installed within /usr/bin
and the user’s tools are located in /usr/local/bin
- so that those aren’t overwritten by any eventual system update.
Then, in this case jail_ffmpeg
is a user’s tool (a script indeed) located in /usr/local/bin/
that internally calls the standard software firejail
situated within /usr/bin/