mirror of
https://github.com/RGBCube/serenity
synced 2025-10-31 20:42:43 +00:00
34 lines
838 B
Markdown
34 lines
838 B
Markdown
## Name
|
|
|
|
unveil - unveil certain paths when running a command
|
|
|
|
## Synopsis
|
|
|
|
```**sh
|
|
$ unveil [--path] [command...]
|
|
```
|
|
|
|
## Description
|
|
|
|
Run a command under certain path restrictions by using [`unveil`(2)](help://man/2/unveil).
|
|
|
|
## Options
|
|
|
|
* `-u`, `--path`: Unveil a path, with the format of `permissions,path`
|
|
|
|
## Examples
|
|
|
|
Run `ls -la /sys/kernel` with restricted access to certain paths:
|
|
```sh
|
|
$ unveil --path=r,/etc/timezone --path=r,/usr/lib --path=r,/sys/ --path=r,/etc/passwd --path=r,/etc/group ls -la /sys/kernel
|
|
```
|
|
|
|
Run `ps -ef` with restricted access to certain paths:
|
|
```sh
|
|
$ unveil --path=r,/etc/timezone --path=r,/usr/lib --path=r,/sys/ --path=r,/etc/passwd --path=r,/etc/group ps -ef
|
|
```
|
|
|
|
## See also
|
|
* [`pledge`(2)](help://man/2/pledge)
|
|
* [`unveil`(2)](help://man/2/unveil)
|
|
* [`Mitigations`(7)](help://man/7/Mitigations)
|