aboutsummaryrefslogtreecommitdiffstats
path: root/src/man
diff options
context:
space:
mode:
authorLibravatar netblue <netblue@debian>2022-01-21 10:13:22 -0500
committerLibravatar netblue <netblue@debian>2022-01-21 10:13:22 -0500
commit39654d01661ea9310b9b886a572ee24b1e4c9cfb (patch)
tree88c9787f0cbb50e2c237ade62c89f8dccc5da9f2 /src/man
parentallow apostrophe in whitelist/blacklist ( #4614) (diff)
downloadfirejail-39654d01661ea9310b9b886a572ee24b1e4c9cfb.tar.gz
firejail-39654d01661ea9310b9b886a572ee24b1e4c9cfb.tar.zst
firejail-39654d01661ea9310b9b886a572ee24b1e4c9cfb.zip
adding netlink to --protocol list (#4605)
Diffstat (limited to 'src/man')
-rw-r--r--src/man/firejail-profile.txt3
-rw-r--r--src/man/firejail.txt2
2 files changed, 3 insertions, 2 deletions
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt
index 5ce07c2ca..f4f157b9e 100644
--- a/src/man/firejail-profile.txt
+++ b/src/man/firejail-profile.txt
@@ -504,7 +504,8 @@ There is no root account (uid 0) defined in the namespace.
504\fBprotocol protocol1,protocol2,protocol3 504\fBprotocol protocol1,protocol2,protocol3
505Enable protocol filter. The filter is based on seccomp and checks the 505Enable protocol filter. The filter is based on seccomp and checks the
506first argument to socket system call. Recognized values: \fBunix\fR, 506first argument to socket system call. Recognized values: \fBunix\fR,
507\fBinet\fR, \fBinet6\fR, \fBnetlink\fR, \fBpacket\fR and \fBbluetooth\fR. 507\fBinet\fR, \fBinet6\fR, \fBnetlink\fR, \fBpacket\fR, \fBbluetooth\fR and \fBnetlink\fR.
508Multiple protocol commands are allowed.
508.TP 509.TP
509\fBseccomp 510\fBseccomp
510Enable seccomp filter and blacklist the syscalls in the default list. See man 1 firejail for more details. 511Enable seccomp filter and blacklist the syscalls in the default list. See man 1 firejail for more details.
diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index 9e3bce643..385e8af28 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -2167,7 +2167,7 @@ $ firejail \-\-profile.print=browser
2167.TP 2167.TP
2168\fB\-\-protocol=protocol,protocol,protocol 2168\fB\-\-protocol=protocol,protocol,protocol
2169Enable protocol filter. The filter is based on seccomp and checks the first argument to socket system call. 2169Enable protocol filter. The filter is based on seccomp and checks the first argument to socket system call.
2170Recognized values: unix, inet, inet6, netlink, packet and bluetooth. This option is not supported for i386 architecture. 2170Recognized values: unix, inet, inet6, netlink, packet, bluetooth and netlink. This option is not supported for i386 architecture.
2171.br 2171.br
2172 2172
2173.br 2173.br