diff options
author | 2022-07-19 15:19:24 +0200 | |
---|---|---|
committer | 2022-07-23 16:21:14 +0200 | |
commit | 87afef810c2dfbf67420dc76a67c707fbb7353db (patch) | |
tree | d44aed25d9c050967eb6abe31b4081c0956f4a74 /src/include | |
parent | protocol filter: add x32 ABI handling (diff) | |
download | firejail-87afef810c2dfbf67420dc76a67c707fbb7353db.tar.gz firejail-87afef810c2dfbf67420dc76a67c707fbb7353db.tar.zst firejail-87afef810c2dfbf67420dc76a67c707fbb7353db.zip |
introduce new option restrict-namespaces
Diffstat (limited to 'src/include')
-rw-r--r-- | src/include/rundefs.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/include/rundefs.h b/src/include/rundefs.h index 08042d2c4..079670f10 100644 --- a/src/include/rundefs.h +++ b/src/include/rundefs.h | |||
@@ -68,6 +68,8 @@ | |||
68 | #define RUN_SECCOMP_32 RUN_SECCOMP_DIR "/seccomp.32" // 32bit arch filter installed on 64bit architectures | 68 | #define RUN_SECCOMP_32 RUN_SECCOMP_DIR "/seccomp.32" // 32bit arch filter installed on 64bit architectures |
69 | #define RUN_SECCOMP_MDWX RUN_SECCOMP_DIR "/seccomp.mdwx" // filter for memory-deny-write-execute | 69 | #define RUN_SECCOMP_MDWX RUN_SECCOMP_DIR "/seccomp.mdwx" // filter for memory-deny-write-execute |
70 | #define RUN_SECCOMP_MDWX_32 RUN_SECCOMP_DIR "/seccomp.mdwx.32" | 70 | #define RUN_SECCOMP_MDWX_32 RUN_SECCOMP_DIR "/seccomp.mdwx.32" |
71 | #define RUN_SECCOMP_NS RUN_SECCOMP_DIR "/seccomp.namespaces" | ||
72 | #define RUN_SECCOMP_NS_32 RUN_SECCOMP_DIR "/seccomp.namespaces.32" | ||
71 | #define RUN_SECCOMP_BLOCK_SECONDARY RUN_SECCOMP_DIR "/seccomp.block_secondary" // secondary arch blocking filter | 73 | #define RUN_SECCOMP_BLOCK_SECONDARY RUN_SECCOMP_DIR "/seccomp.block_secondary" // secondary arch blocking filter |
72 | #define RUN_SECCOMP_POSTEXEC RUN_SECCOMP_DIR "/seccomp.postexec" // filter for post-exec library | 74 | #define RUN_SECCOMP_POSTEXEC RUN_SECCOMP_DIR "/seccomp.postexec" // filter for post-exec library |
73 | #define RUN_SECCOMP_POSTEXEC_32 RUN_SECCOMP_DIR "/seccomp.postexec32" // filter for post-exec library | 75 | #define RUN_SECCOMP_POSTEXEC_32 RUN_SECCOMP_DIR "/seccomp.postexec32" // filter for post-exec library |