diff options
| author |  smitsohu <smitsohu@gmail.com> | 2021-06-26 16:37:13 +0200 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2021-06-26 16:37:13 +0200 |
| commit | 46712f70d9dcc4f5be23d474846c2ff9d88db0d3 (patch) | |
| tree | cb27faaaf17cdd1dc708a9173e10d24331e4abfd /etc/firejail.config | |
| parent | Merge pull request #4374 from smitsohu/euid (diff) | |
| parent | RELNOTES (diff) | |
| download | firejail-46712f70d9dcc4f5be23d474846c2ff9d88db0d3.tar.gz firejail-46712f70d9dcc4f5be23d474846c2ff9d88db0d3.tar.zst firejail-46712f70d9dcc4f5be23d474846c2ff9d88db0d3.zip | |
Merge pull request #4340 from smitsohu/kcmp
augment seccomp lists in firejail.config
Diffstat (limited to 'etc/firejail.config')
| -rw-r--r-- | etc/firejail.config | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/firejail.config b/etc/firejail.config index f5b3d5efa..43db49422 100644 --- a/etc/firejail.config +++ b/etc/firejail.config | |||
| @@ -113,6 +113,10 @@ | |||
| 113 | # Enable or disable seccomp support, default enabled. | 113 | # Enable or disable seccomp support, default enabled. |
| 114 | # seccomp yes | 114 | # seccomp yes |
| 115 | 115 | ||
| 116 | # Add rules to the default seccomp filter. Same syntax as for --seccomp= | ||
| 117 | # None by default; this is an example. | ||
| 118 | # seccomp-filter-add !chroot,kcmp,mincore | ||
| 119 | |||
| 116 | # Seccomp error action, kill, log or errno (EPERM, ENOSYS etc) | 120 | # Seccomp error action, kill, log or errno (EPERM, ENOSYS etc) |
| 117 | # seccomp-error-action EPERM | 121 | # seccomp-error-action EPERM |
| 118 | 122 | ||