seccomp testing

2 files changed, 10 insertions, 2 deletions

diff --git a/src/firejail/usage.c b/src/firejail/usage.c
index 096d44765..a9900cf33 100644
--- a/src/firejail/usage.c
+++ b/src/firejail/usage.c
@@ -213,7 +213,11 @@ void usage(void) {
         printf("\t\tfinit_module, delete_module, iopl, ioperm, swapon, swapoff,\n");
         printf("\t\tsyslog, process_vm_readv and process_vm_writev\n");
         printf("\t\tsysfs,_sysctl, adjtimex, clock_adjtime, lookup_dcookie,\n");
-        printf("\t\tperf_event_open, fanotify_init and kcmp.\n\n");
+        printf("\t\tperf_event_open, fanotify_init, kcmp, add_key, request_key,\n");
+        printf("\t\tkeyctl, uselib, acct, modify_ldt, pivot_root, io_setup,\n");
+        printf("\t\tio_destroy, io_getevents, io_submit, io_cancel,\n");
+        printf("\t\tremap_file_pages, mbind, get_mempolicy, set_mempolicy,\n");
+        printf("\t\tmigrate_pages, move_pages, vmsplice, and perf_event_open.\n\n");
         
         printf("\t--seccomp=syscall,syscall,syscall - enable seccomp filter, blacklist the\n");
         printf("\t\tdefault syscall list and the syscalls specified by the command.\n\n");
diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index 9d3595d16..ae9d07bb8 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -861,7 +861,11 @@ $ firejail \-\-net=eth0 \-\-scan
 Enable seccomp filter and blacklist the syscalls in the default list. The default list is as follows:
 mount, umount2, ptrace, kexec_load, open_by_handle_at, init_module, finit_module, delete_module,
 iopl, ioperm, swapon, swapoff, syslog, process_vm_readv and process_vm_writev,
-sysfs,_sysctl, adjtimex, clock_adjtime, lookup_dcookie, perf_event_open, fanotify_init and kcmp.
+sysfs,_sysctl, adjtimex, clock_adjtime, lookup_dcookie, perf_event_open, fanotify_init, kcmp,
+add_key, request_key, keyctl, uselib, acct, modify_ldt, pivot_root, io_setup,
+io_destroy, io_getevents, io_submit, io_cancel,
+remap_file_pages, mbind, get_mempolicy, set_mempolicy,
+migrate_pages, move_pages, vmsplice, and perf_event_open.
 .br
 
 .br