relnotes

2 files changed, 21 insertions, 1 deletions

diff --git a/README.md b/README.md
index 8371ba67d..f6efc50c5 100644
--- a/README.md
+++ b/README.md
@@ -283,6 +283,25 @@ INTRUSION DETECTION SYSTEM (IDS)
 
 `````
 
+### File descriptors
+`````
+       --keep-fd=all
+              Inherit all open file descriptors to  the  sandbox.  By  default
+              only  file  descriptors 0, 1 and 2 are inherited to the sandbox,
+              and all other file descriptors are closed.
+
+              Example:
+              $ firejail --keep-fd=all
+
+       --keep-fd=file_descriptor
+              Don't close specified open file  descriptors.  By  default  only
+              file  descriptors  0,  1 and 2 are inherited to the sandbox, and
+              all other file descriptors are closed.
+
+              Example:
+              $ firejail --keep-fd=3,4,5
+`````
+
 ### Deteministic Shutdown
 `````
       --deterministic-exit-code
@@ -298,7 +317,7 @@ INTRUSION DETECTION SYSTEM (IDS)
 
 ### Network Monitor
 `````
-        --nettrace=name|pid
+       --nettrace=name|pid
               Monitor TCP and UDP traffic coming into the sandbox specified by
               name or pid. Only networked sandboxes  created  with  --net  are
               supported.
diff --git a/RELNOTES b/RELNOTES
index a8dc5eef4..09472eeb3 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -1,6 +1,7 @@
 firejail (0.9.67) baseline; urgency=low
   * work in progress
   * exit code: distinguish fatal signals by adding 128 (#4533)
+  * close file descriptors greater than 2 (--keep-fd) (#4845)
   * intrusion detection system (--ids-init, --ids-check)
   * deterministic shutdown (--deterministic-exit-code,
      --deterministic-shutdown) (#4635)