diff options
| author |  smitsohu <smitsohu@gmail.com> | 2021-06-20 13:29:48 +0200 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2021-06-20 13:29:48 +0200 |
| commit | 533242ac32590a47e76fc1ef5bfe48f32e1f131f (patch) | |
| tree | f3275b56b720c80e6c0057244ef82c87d3ac8ae9 /src/man/firejail.txt | |
| parent | Fix seahorse-adventures + CI (diff) | |
| download | firejail-533242ac32590a47e76fc1ef5bfe48f32e1f131f.tar.gz firejail-533242ac32590a47e76fc1ef5bfe48f32e1f131f.tar.zst firejail-533242ac32590a47e76fc1ef5bfe48f32e1f131f.zip | |
augment seccomp lists in firejail.config
Diffstat (limited to 'src/man/firejail.txt')
| -rw-r--r-- | src/man/firejail.txt | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 3212a88e4..7d7a1eb31 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt | |||
| @@ -2209,6 +2209,12 @@ Firejail will print seccomp violations to the audit log if the kernel was compil | |||
| 2209 | Example: | 2209 | Example: |
| 2210 | .br | 2210 | .br |
| 2211 | $ firejail \-\-seccomp | 2211 | $ firejail \-\-seccomp |
| 2212 | .br | ||
| 2213 | |||
| 2214 | .br | ||
| 2215 | The default list can be customized, see \-\-seccomp= for a description. It can be customized | ||
| 2216 | also globally in /etc/firejail/firejail.config file. | ||
| 2217 | |||
| 2212 | .TP | 2218 | .TP |
| 2213 | \fB\-\-seccomp=syscall,@group,!syscall2 | 2219 | \fB\-\-seccomp=syscall,@group,!syscall2 |
| 2214 | Enable seccomp filter, whitelist "syscall2", but blacklist the default | 2220 | Enable seccomp filter, whitelist "syscall2", but blacklist the default |