diff options
author | Азалия Смарагдова <charming.flurry@yandex.ru> | 2022-08-16 12:03:50 +0500 |
---|---|---|
committer | Азалия Смарагдова <charming.flurry@yandex.ru> | 2022-08-16 12:03:50 +0500 |
commit | 460fa7a6f98cc1e7aec2953e6523f32677d546c7 (patch) | |
tree | eaebba9e4ed52d6ea22b428e98fef42854fc3efb /src/zsh_completion/_firejail.in | |
parent | Update quotation marks in src/zsh_completion/_firejail.in (diff) | |
download | firejail-460fa7a6f98cc1e7aec2953e6523f32677d546c7.tar.gz firejail-460fa7a6f98cc1e7aec2953e6523f32677d546c7.tar.zst firejail-460fa7a6f98cc1e7aec2953e6523f32677d546c7.zip |
Proposed fixes.
Diffstat (limited to 'src/zsh_completion/_firejail.in')
-rw-r--r-- | src/zsh_completion/_firejail.in | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/src/zsh_completion/_firejail.in b/src/zsh_completion/_firejail.in index da024eae5..ed7337762 100644 --- a/src/zsh_completion/_firejail.in +++ b/src/zsh_completion/_firejail.in | |||
@@ -105,10 +105,12 @@ _firejail_args=( | |||
105 | '--keep-dev-shm[/dev/shm directory is untouched (even with --private-dev)]' | 105 | '--keep-dev-shm[/dev/shm directory is untouched (even with --private-dev)]' |
106 | '--keep-fd[inherit open file descriptors to sandbox]: :' | 106 | '--keep-fd[inherit open file descriptors to sandbox]: :' |
107 | '--keep-var-tmp[/var/tmp directory is untouched]' | 107 | '--keep-var-tmp[/var/tmp directory is untouched]' |
108 | '--landlock-read=-[Landlock read access rule]: :_files' | 108 | '--landlock[Basic Landlock ruleset]' |
109 | '--landlock-write=-[Landlock write access rule]: :_files' | 109 | '--landlock.proc=-[Access to the /proc directory]: :(no ro rw)' |
110 | "--landlock-restricted-write=-[Landlock write access rule that doesn't include creation of FIFO pipes, sockets and block devices]: :_files" | 110 | '--landlock.read=-[Landlock read access rule]: :_files' |
111 | '--landlock-execute=-[Landlock execution-permitting rule]: :_files' | 111 | '--landlock.write=-[Landlock write access rule]: :_files' |
112 | "--landlock.special=-[Landlock access rule for creation of FIFO pipes, sockets and block devices]: :_files" | ||
113 | '--landlock.execute=-[Landlock execution-permitting rule]: :_files' | ||
112 | '--machine-id[spoof /etc/machine-id with a random id]' | 114 | '--machine-id[spoof /etc/machine-id with a random id]' |
113 | '--memory-deny-write-execute[seccomp filter to block attempts to create memory mappings that are both writable and executable]' | 115 | '--memory-deny-write-execute[seccomp filter to block attempts to create memory mappings that are both writable and executable]' |
114 | '*--mkdir=-[create a directory]:' | 116 | '*--mkdir=-[create a directory]:' |