diff options
| author |  Topi Miettinen <toiwoton@gmail.com> | 2017-11-11 11:47:30 +0200 |
|---|---|---|
| committer | Topi Miettinen <toiwoton@gmail.com> | 2017-11-11 11:47:30 +0200 |
| commit | ce17788a48dfb059bf3fff5211d57f672d017ee9 (patch) | |
| tree | 445f803bb3ca247e71dfa675569f10859e3a8514 /src/man | |
| parent | Add {b,d}nox aliases for inox browser (diff) | |
| download | firejail-ce17788a48dfb059bf3fff5211d57f672d017ee9.tar.gz firejail-ce17788a48dfb059bf3fff5211d57f672d017ee9.tar.zst firejail-ce17788a48dfb059bf3fff5211d57f672d017ee9.zip | |
seccomp mdwx: block pkey_mprotect like mprotect
Diffstat (limited to 'src/man')
| -rw-r--r-- | src/man/firejail.txt | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 9f6da87ee..e0eb723bc 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt | |||
| @@ -763,8 +763,8 @@ $ firejail \-\-machine-id | |||
| 763 | Install a seccomp filter to block attempts to create memory mappings | 763 | Install a seccomp filter to block attempts to create memory mappings |
| 764 | that are both writable and executable, to change mappings to be | 764 | that are both writable and executable, to change mappings to be |
| 765 | executable, or to create executable shared memory. The filter examines | 765 | executable, or to create executable shared memory. The filter examines |
| 766 | the arguments of mmap, mmap2, mprotect and shmat system calls | 766 | the arguments of mmap, mmap2, mprotect, pkey_mprotect and shmat system |
| 767 | and kills the process if necessary. | 767 | calls and kills the process if necessary. |
| 768 | .br | 768 | .br |
| 769 | 769 | ||
| 770 | .br | 770 | .br |