aboutsummaryrefslogtreecommitdiffstats
path: root/README.md
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2015-10-29 08:35:00 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2015-10-29 08:35:00 -0400
commit66e526598e5334add87c1ce5d880ed7151adaa35 (patch)
tree181be30d4ba657fccce2fef211f30feb865738b0 /README.md
parentreadme.md (diff)
downloadfirejail-66e526598e5334add87c1ce5d880ed7151adaa35.tar.gz
firejail-66e526598e5334add87c1ce5d880ed7151adaa35.tar.zst
firejail-66e526598e5334add87c1ce5d880ed7151adaa35.zip
readme.md
Diffstat (limited to 'README.md')
-rw-r--r--README.md10
1 files changed, 5 insertions, 5 deletions
diff --git a/README.md b/README.md
index 822c455e8..36cebdcba 100644
--- a/README.md
+++ b/README.md
@@ -80,16 +80,16 @@ Enable protocol filter. It is based on seccomp and it filters the first argument
80If the value is not recognized, seccomp will kill the process. 80If the value is not recognized, seccomp will kill the process.
81Valid values: unix, inet, inet6, netlink and packet. 81Valid values: unix, inet, inet6, netlink and packet.
82 82
83"unix" describes the regular Unix socket connections,
84and "inet" and "inet6" describe the regular IPv4 and IPv6 traffic. Most GUI applications need "unix,inet,inet6". "netlink" is the protocol
85used to talk to Linux kernel. You'll only need this for applications such as [iproute2](http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2) for
86system administration, and "packet" is used by sniffers to talk directly with the Ethernet layer.
87
88Example: 83Example:
89````` 84`````
90$ firejail --protocol=unix,inet,inet6 85$ firejail --protocol=unix,inet,inet6
91````` 86`````
92 87
88"unix" describes the regular Unix socket connections,
89and "inet" and "inet6" describe the regular IPv4 and IPv6 traffic. Most GUI applications need "unix,inet,inet6". "netlink" is the protocol
90used to talk to Linux kernel. You'll only need this for applications such as [iproute2](http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2)
91used in system administration, and "packet" is used by sniffers to talk directly with the Ethernet layer.
92
93Protocol filter is enabled in all default security profiles for GUI applications ("protocol unix,inet,inet6"). 93Protocol filter is enabled in all default security profiles for GUI applications ("protocol unix,inet,inet6").
94 94
95### Dual i386/amd64 seccomp filter 95### Dual i386/amd64 seccomp filter