aboutsummaryrefslogtreecommitdiffstats
path: root/src/man/firejail.txt
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2019-08-29 14:50:57 -0500
committerLibravatar GitHub <noreply@github.com>2019-08-29 14:50:57 -0500
commitc80831aa7596e5937d4fd7650877bc83c43453e2 (patch)
treed77ad00b620d00b2aa545b7e556a902eb8f62f9f /src/man/firejail.txt
parentfix previous merge (diff)
parentAdd further seccomp groups (diff)
downloadfirejail-c80831aa7596e5937d4fd7650877bc83c43453e2.tar.gz
firejail-c80831aa7596e5937d4fd7650877bc83c43453e2.tar.zst
firejail-c80831aa7596e5937d4fd7650877bc83c43453e2.zip
Merge pull request #2928 from topimiettinen/seccomp-more-groups
Add further seccomp groups
Diffstat (limited to 'src/man/firejail.txt')
-rw-r--r--src/man/firejail.txt8
1 files changed, 5 insertions, 3 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index afff3d5fa..500850413 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -1776,9 +1776,11 @@ vm86, vm86old, vmsplice and vserver.
1776 1776
1777.br 1777.br
1778To help creating useful seccomp filters more easily, the following 1778To help creating useful seccomp filters more easily, the following
1779system call groups are defined: @clock, @cpu-emulation, @debug, 1779system call groups are defined: @aio, @basic-io, @chown, @clock,
1780@default, @default-nodebuggers, @default-keep, @module, @obsolete, 1780@cpu-emulation, @debug, @default, @default-nodebuggers, @default-keep,
1781@privileged, @raw-io, @reboot, @resources and @swap. In addition, a 1781@file-system, @io-event, @ipc, @keyring, @memlock, @module, @mount,
1782@network-io, @obsolete, @privileged, @process, @raw-io, @reboot,
1783@resources, @setuid, @swap, @sync, @system-service and @timer. In addition, a
1782system call can be specified by its number instead of name with prefix 1784system call can be specified by its number instead of name with prefix
1783$, so for example $165 would be equal to mount on i386. Exceptions 1785$, so for example $165 would be equal to mount on i386. Exceptions
1784can be allowed with prefix !. 1786can be allowed with prefix !.