diff options
author | Topi Miettinen <toiwoton@gmail.com> | 2017-11-11 11:47:30 +0200 |
---|---|---|
committer | Topi Miettinen <toiwoton@gmail.com> | 2017-11-11 11:47:30 +0200 |
commit | ce17788a48dfb059bf3fff5211d57f672d017ee9 (patch) | |
tree | 445f803bb3ca247e71dfa675569f10859e3a8514 /src/man/firejail.txt | |
parent | Add {b,d}nox aliases for inox browser (diff) | |
download | firejail-ce17788a48dfb059bf3fff5211d57f672d017ee9.tar.gz firejail-ce17788a48dfb059bf3fff5211d57f672d017ee9.tar.zst firejail-ce17788a48dfb059bf3fff5211d57f672d017ee9.zip |
seccomp mdwx: block pkey_mprotect like mprotect
Diffstat (limited to 'src/man/firejail.txt')
-rw-r--r-- | src/man/firejail.txt | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 9f6da87ee..e0eb723bc 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt | |||
@@ -763,8 +763,8 @@ $ firejail \-\-machine-id | |||
763 | Install a seccomp filter to block attempts to create memory mappings | 763 | Install a seccomp filter to block attempts to create memory mappings |
764 | that are both writable and executable, to change mappings to be | 764 | that are both writable and executable, to change mappings to be |
765 | executable, or to create executable shared memory. The filter examines | 765 | executable, or to create executable shared memory. The filter examines |
766 | the arguments of mmap, mmap2, mprotect and shmat system calls | 766 | the arguments of mmap, mmap2, mprotect, pkey_mprotect and shmat system |
767 | and kills the process if necessary. | 767 | calls and kills the process if necessary. |
768 | .br | 768 | .br |
769 | 769 | ||
770 | .br | 770 | .br |