diff options
| author |  Topi Miettinen <toiwoton@gmail.com> | 2017-07-29 19:53:27 +0300 |
|---|---|---|
| committer |  Topi Miettinen <topimiettinen@users.noreply.github.com> | 2017-07-30 16:48:16 +0000 |
| commit | 53606495188a5cc16ea67e3b65561127a98925b3 (patch) | |
| tree | 554c6e90c785ae015f8d784b593d9cdf75fde315 /src/man | |
| parent | Improve loading of seccomp filter (diff) | |
| download | firejail-53606495188a5cc16ea67e3b65561127a98925b3.tar.gz firejail-53606495188a5cc16ea67e3b65561127a98925b3.tar.zst firejail-53606495188a5cc16ea67e3b65561127a98925b3.zip | |
Memory-deny-write-execute feature
Feature to block attempts to create writable and executable memory.
Diffstat (limited to 'src/man')
| -rw-r--r-- | src/man/firejail.txt | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 0ce72f845..3a5e8560c 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt | |||
| @@ -740,6 +740,12 @@ Example: | |||
| 740 | $ firejail \-\-machine-id | 740 | $ firejail \-\-machine-id |
| 741 | 741 | ||
| 742 | .TP | 742 | .TP |
| 743 | \fB\-\-memory-deny-write-execute | ||
| 744 | Install a seccomp filter to block attempts to create memory mappings | ||
| 745 | that are both writable and executable, to change mappings to be | ||
| 746 | executable or to create executable shared memory. | ||
| 747 | |||
| 748 | .TP | ||
| 743 | \fB\-\-mtu=number | 749 | \fB\-\-mtu=number |
| 744 | Assign a MTU value to the last network interface defined by a \-\-net option. | 750 | Assign a MTU value to the last network interface defined by a \-\-net option. |
| 745 | .br | 751 | .br |