diff options
author | netblue30 <netblue30@yahoo.com> | 2019-08-29 14:50:57 -0500 |
---|---|---|
committer | GitHub <noreply@github.com> | 2019-08-29 14:50:57 -0500 |
commit | c80831aa7596e5937d4fd7650877bc83c43453e2 (patch) | |
tree | d77ad00b620d00b2aa545b7e556a902eb8f62f9f /src/man/firejail.txt | |
parent | fix previous merge (diff) | |
parent | Add further seccomp groups (diff) | |
download | firejail-c80831aa7596e5937d4fd7650877bc83c43453e2.tar.gz firejail-c80831aa7596e5937d4fd7650877bc83c43453e2.tar.zst firejail-c80831aa7596e5937d4fd7650877bc83c43453e2.zip |
Merge pull request #2928 from topimiettinen/seccomp-more-groups
Add further seccomp groups
Diffstat (limited to 'src/man/firejail.txt')
-rw-r--r-- | src/man/firejail.txt | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt index afff3d5fa..500850413 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt | |||
@@ -1776,9 +1776,11 @@ vm86, vm86old, vmsplice and vserver. | |||
1776 | 1776 | ||
1777 | .br | 1777 | .br |
1778 | To help creating useful seccomp filters more easily, the following | 1778 | To help creating useful seccomp filters more easily, the following |
1779 | system call groups are defined: @clock, @cpu-emulation, @debug, | 1779 | system call groups are defined: @aio, @basic-io, @chown, @clock, |
1780 | @default, @default-nodebuggers, @default-keep, @module, @obsolete, | 1780 | @cpu-emulation, @debug, @default, @default-nodebuggers, @default-keep, |
1781 | @privileged, @raw-io, @reboot, @resources and @swap. In addition, a | 1781 | @file-system, @io-event, @ipc, @keyring, @memlock, @module, @mount, |
1782 | @network-io, @obsolete, @privileged, @process, @raw-io, @reboot, | ||
1783 | @resources, @setuid, @swap, @sync, @system-service and @timer. In addition, a | ||
1782 | system call can be specified by its number instead of name with prefix | 1784 | system call can be specified by its number instead of name with prefix |
1783 | $, so for example $165 would be equal to mount on i386. Exceptions | 1785 | $, so for example $165 would be equal to mount on i386. Exceptions |
1784 | can be allowed with prefix !. | 1786 | can be allowed with prefix !. |