diff options
| author |  smitsohu <smitsohu@gmail.com> | 2022-07-19 15:19:24 +0200 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2022-07-23 16:21:14 +0200 |
| commit | 87afef810c2dfbf67420dc76a67c707fbb7353db (patch) | |
| tree | d44aed25d9c050967eb6abe31b4081c0956f4a74 /src/include/rundefs.h | |
| parent | protocol filter: add x32 ABI handling (diff) | |
| download | firejail-87afef810c2dfbf67420dc76a67c707fbb7353db.tar.gz firejail-87afef810c2dfbf67420dc76a67c707fbb7353db.tar.zst firejail-87afef810c2dfbf67420dc76a67c707fbb7353db.zip | |
introduce new option restrict-namespaces
Diffstat (limited to 'src/include/rundefs.h')
| -rw-r--r-- | src/include/rundefs.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/include/rundefs.h b/src/include/rundefs.h index 08042d2c4..079670f10 100644 --- a/src/include/rundefs.h +++ b/src/include/rundefs.h | |||
| @@ -68,6 +68,8 @@ | |||
| 68 | #define RUN_SECCOMP_32 RUN_SECCOMP_DIR "/seccomp.32" // 32bit arch filter installed on 64bit architectures | 68 | #define RUN_SECCOMP_32 RUN_SECCOMP_DIR "/seccomp.32" // 32bit arch filter installed on 64bit architectures |
| 69 | #define RUN_SECCOMP_MDWX RUN_SECCOMP_DIR "/seccomp.mdwx" // filter for memory-deny-write-execute | 69 | #define RUN_SECCOMP_MDWX RUN_SECCOMP_DIR "/seccomp.mdwx" // filter for memory-deny-write-execute |
| 70 | #define RUN_SECCOMP_MDWX_32 RUN_SECCOMP_DIR "/seccomp.mdwx.32" | 70 | #define RUN_SECCOMP_MDWX_32 RUN_SECCOMP_DIR "/seccomp.mdwx.32" |
| 71 | #define RUN_SECCOMP_NS RUN_SECCOMP_DIR "/seccomp.namespaces" | ||
| 72 | #define RUN_SECCOMP_NS_32 RUN_SECCOMP_DIR "/seccomp.namespaces.32" | ||
| 71 | #define RUN_SECCOMP_BLOCK_SECONDARY RUN_SECCOMP_DIR "/seccomp.block_secondary" // secondary arch blocking filter | 73 | #define RUN_SECCOMP_BLOCK_SECONDARY RUN_SECCOMP_DIR "/seccomp.block_secondary" // secondary arch blocking filter |
| 72 | #define RUN_SECCOMP_POSTEXEC RUN_SECCOMP_DIR "/seccomp.postexec" // filter for post-exec library | 74 | #define RUN_SECCOMP_POSTEXEC RUN_SECCOMP_DIR "/seccomp.postexec" // filter for post-exec library |
| 73 | #define RUN_SECCOMP_POSTEXEC_32 RUN_SECCOMP_DIR "/seccomp.postexec32" // filter for post-exec library | 75 | #define RUN_SECCOMP_POSTEXEC_32 RUN_SECCOMP_DIR "/seccomp.postexec32" // filter for post-exec library |