diff options
author | 2015-08-16 15:43:50 -0400 | |
---|---|---|
committer | 2015-08-16 15:43:50 -0400 | |
commit | 3bfb00f627f5d4ff6879d886165fb751868527b0 (patch) | |
tree | 85d57bb0b7487af3637936a82a4115b9d0c11341 /src/man/firejail-profile.txt | |
parent | moved warning under --debug option (diff) | |
download | firejail-3bfb00f627f5d4ff6879d886165fb751868527b0.tar.gz firejail-3bfb00f627f5d4ff6879d886165fb751868527b0.tar.zst firejail-3bfb00f627f5d4ff6879d886165fb751868527b0.zip |
removed mknod from default seccomp filter, some software packages are using named pipes created with mknod
Diffstat (limited to 'src/man/firejail-profile.txt')
-rw-r--r-- | src/man/firejail-profile.txt | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt index 4941d8b8b..7be5304c1 100644 --- a/src/man/firejail-profile.txt +++ b/src/man/firejail-profile.txt | |||
@@ -106,7 +106,7 @@ Whitelist Linux capabilities filter. | |||
106 | \f\seccomp | 106 | \f\seccomp |
107 | Enable default seccomp filter. The default list is as follows: | 107 | Enable default seccomp filter. The default list is as follows: |
108 | mount, umount2, ptrace, kexec_load, open_by_handle_at, init_module, finit_module, delete_module, | 108 | mount, umount2, ptrace, kexec_load, open_by_handle_at, init_module, finit_module, delete_module, |
109 | iopl, ioperm, swapon, swapoff, mknode, syslog, process_vm_readv and process_vm_writev, | 109 | iopl, ioperm, swapon, swapoff, syslog, process_vm_readv and process_vm_writev, |
110 | sysfs,_sysctl, adjtimex, clock_adjtime, lookup_dcookie, perf_event_open, fanotify_init and kcmp. | 110 | sysfs,_sysctl, adjtimex, clock_adjtime, lookup_dcookie, perf_event_open, fanotify_init and kcmp. |
111 | .TP | 111 | .TP |
112 | \f\seccomp syscall,syscall,syscall | 112 | \f\seccomp syscall,syscall,syscall |