diff options
| author |  netblue30 <netblue30@yahoo.com> | 2015-10-29 08:33:18 -0400 |
|---|---|---|
| committer | netblue30 <netblue30@yahoo.com> | 2015-10-29 08:33:18 -0400 |
| commit | a0e8df13f1f65ea831bf528d4775884c5ed3c3bf (patch) | |
| tree | a2633d60dd8d732ad40a0f81c0955d8eb4eaeb83 /README.md | |
| parent | readme.md (diff) | |
| download | firejail-a0e8df13f1f65ea831bf528d4775884c5ed3c3bf.tar.gz firejail-a0e8df13f1f65ea831bf528d4775884c5ed3c3bf.tar.zst firejail-a0e8df13f1f65ea831bf528d4775884c5ed3c3bf.zip | |
readme.md
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 4 |
1 files changed, 2 insertions, 2 deletions
| @@ -78,10 +78,10 @@ $ firejail --ignore=seccomp wine | |||
| 78 | 78 | ||
| 79 | Enable protocol filter. It is based on seccomp and it filters the first argument to socket system call. | 79 | Enable protocol filter. It is based on seccomp and it filters the first argument to socket system call. |
| 80 | If the value is not recognized, seccomp will kill the process. | 80 | If the value is not recognized, seccomp will kill the process. |
| 81 | Recognized values: unix, inet, inet6, netlink and packet. | 81 | Valid values: unix, inet, inet6, netlink and packet. |
| 82 | 82 | ||
| 83 | "unix" describes the regular Unix socket connections, | 83 | "unix" describes the regular Unix socket connections, |
| 84 | and "inet" and "inet6" are the regular IPv4 and IPv6 traffic. Most GUI applications need "unix,inet,inet6". "netlink" is the protocol | 84 | and "inet" and "inet6" describe the regular IPv4 and IPv6 traffic. Most GUI applications need "unix,inet,inet6". "netlink" is the protocol |
| 85 | used to talk to Linux kernel. You'll only need this for applications such as [iproute2](http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2) for | 85 | used to talk to Linux kernel. You'll only need this for applications such as [iproute2](http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2) for |
| 86 | system administration, and "packet" is used by sniffers to talk directly with the Ethernet layer. | 86 | system administration, and "packet" is used by sniffers to talk directly with the Ethernet layer. |
| 87 | 87 | ||