diff options
author | 2021-06-26 16:37:13 +0200 | |
---|---|---|
committer | 2021-06-26 16:37:13 +0200 | |
commit | 46712f70d9dcc4f5be23d474846c2ff9d88db0d3 (patch) | |
tree | cb27faaaf17cdd1dc708a9173e10d24331e4abfd /etc | |
parent | Merge pull request #4374 from smitsohu/euid (diff) | |
parent | RELNOTES (diff) | |
download | firejail-46712f70d9dcc4f5be23d474846c2ff9d88db0d3.tar.gz firejail-46712f70d9dcc4f5be23d474846c2ff9d88db0d3.tar.zst firejail-46712f70d9dcc4f5be23d474846c2ff9d88db0d3.zip |
Merge pull request #4340 from smitsohu/kcmp
augment seccomp lists in firejail.config
Diffstat (limited to 'etc')
-rw-r--r-- | etc/firejail.config | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/firejail.config b/etc/firejail.config index f5b3d5efa..43db49422 100644 --- a/etc/firejail.config +++ b/etc/firejail.config | |||
@@ -113,6 +113,10 @@ | |||
113 | # Enable or disable seccomp support, default enabled. | 113 | # Enable or disable seccomp support, default enabled. |
114 | # seccomp yes | 114 | # seccomp yes |
115 | 115 | ||
116 | # Add rules to the default seccomp filter. Same syntax as for --seccomp= | ||
117 | # None by default; this is an example. | ||
118 | # seccomp-filter-add !chroot,kcmp,mincore | ||
119 | |||
116 | # Seccomp error action, kill, log or errno (EPERM, ENOSYS etc) | 120 | # Seccomp error action, kill, log or errno (EPERM, ENOSYS etc) |
117 | # seccomp-error-action EPERM | 121 | # seccomp-error-action EPERM |
118 | 122 | ||