diff options
author | 2017-07-29 19:53:27 +0300 | |
---|---|---|
committer | 2017-07-30 16:48:16 +0000 | |
commit | 53606495188a5cc16ea67e3b65561127a98925b3 (patch) | |
tree | 554c6e90c785ae015f8d784b593d9cdf75fde315 /src/man/firejail.txt | |
parent | Improve loading of seccomp filter (diff) | |
download | firejail-53606495188a5cc16ea67e3b65561127a98925b3.tar.gz firejail-53606495188a5cc16ea67e3b65561127a98925b3.tar.zst firejail-53606495188a5cc16ea67e3b65561127a98925b3.zip |
Memory-deny-write-execute feature
Feature to block attempts to create writable and executable memory.
Diffstat (limited to 'src/man/firejail.txt')
-rw-r--r-- | src/man/firejail.txt | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 0ce72f845..3a5e8560c 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt | |||
@@ -740,6 +740,12 @@ Example: | |||
740 | $ firejail \-\-machine-id | 740 | $ firejail \-\-machine-id |
741 | 741 | ||
742 | .TP | 742 | .TP |
743 | \fB\-\-memory-deny-write-execute | ||
744 | Install a seccomp filter to block attempts to create memory mappings | ||
745 | that are both writable and executable, to change mappings to be | ||
746 | executable or to create executable shared memory. | ||
747 | |||
748 | .TP | ||
743 | \fB\-\-mtu=number | 749 | \fB\-\-mtu=number |
744 | Assign a MTU value to the last network interface defined by a \-\-net option. | 750 | Assign a MTU value to the last network interface defined by a \-\-net option. |
745 | .br | 751 | .br |