Some blacklists aren't explicit

[amano-kenji]

For example,

firejail/src/firejail/fs.c

Line 744 in 490051f

profile_add("blacklist /sys/module");

I had to figure this out through trials and errors.

[rusty-snake]

What is this?

A change request? A bug report? An information? A request for better Ddcumentation?

If you drop it in a discussion without telling more it is not really helpful.

[amano-kenji]

I think --debug-blacklists would be less verbose. I think it would be helpful for the man page to mention that there are hidden blacklists that you should uncover with --debug-xxx.

My assumption was that all blacklists were in /etc/firejail or ~/.config/firejail.

[jjakob]

I think better documentation is needed. @rusty-snake helped me understand it much better: #5791 (comment)
For a start, the manpage should be expanded with this information. The description of --blacklist does not explain it well enough. Examples like in that comment would also be great.
Probably the same for --whitelist.

[rusty-snake]

btw, contributions (including documentation) are always welcome. As a lot other FLOSS project lives firejail from the work of all its contributors done in their free time.

[rusty-snake]

Actually there is some documentation about it (beside reading the code) in noprofile.profile.

[amano-kenji]

@jjakob I think you are in the best position to add some documentation to the man page.