diff options
author | smitsohu <smitsohu@gmail.com> | 2021-06-20 13:29:48 +0200 |
---|---|---|
committer | smitsohu <smitsohu@gmail.com> | 2021-06-20 13:29:48 +0200 |
commit | 533242ac32590a47e76fc1ef5bfe48f32e1f131f (patch) | |
tree | f3275b56b720c80e6c0057244ef82c87d3ac8ae9 /src/man | |
parent | Fix seahorse-adventures + CI (diff) | |
download | firejail-533242ac32590a47e76fc1ef5bfe48f32e1f131f.tar.gz firejail-533242ac32590a47e76fc1ef5bfe48f32e1f131f.tar.zst firejail-533242ac32590a47e76fc1ef5bfe48f32e1f131f.zip |
augment seccomp lists in firejail.config
Diffstat (limited to 'src/man')
-rw-r--r-- | src/man/firejail.txt | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 3212a88e4..7d7a1eb31 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt | |||
@@ -2209,6 +2209,12 @@ Firejail will print seccomp violations to the audit log if the kernel was compil | |||
2209 | Example: | 2209 | Example: |
2210 | .br | 2210 | .br |
2211 | $ firejail \-\-seccomp | 2211 | $ firejail \-\-seccomp |
2212 | .br | ||
2213 | |||
2214 | .br | ||
2215 | The default list can be customized, see \-\-seccomp= for a description. It can be customized | ||
2216 | also globally in /etc/firejail/firejail.config file. | ||
2217 | |||
2212 | .TP | 2218 | .TP |
2213 | \fB\-\-seccomp=syscall,@group,!syscall2 | 2219 | \fB\-\-seccomp=syscall,@group,!syscall2 |
2214 | Enable seccomp filter, whitelist "syscall2", but blacklist the default | 2220 | Enable seccomp filter, whitelist "syscall2", but blacklist the default |