diff options
-rw-r--r-- | README.md | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -78,10 +78,10 @@ $ firejail --ignore=seccomp wine | |||
78 | 78 | ||
79 | Enable protocol filter. It is based on seccomp and it filters the first argument to socket system call. | 79 | Enable protocol filter. It is based on seccomp and it filters the first argument to socket system call. |
80 | If the value is not recognized, seccomp will kill the process. | 80 | If the value is not recognized, seccomp will kill the process. |
81 | Recognized values: unix, inet, inet6, netlink and packet. | 81 | Valid values: unix, inet, inet6, netlink and packet. |
82 | 82 | ||
83 | "unix" describes the regular Unix socket connections, | 83 | "unix" describes the regular Unix socket connections, |
84 | and "inet" and "inet6" are the regular IPv4 and IPv6 traffic. Most GUI applications need "unix,inet,inet6". "netlink" is the protocol | 84 | and "inet" and "inet6" describe the regular IPv4 and IPv6 traffic. Most GUI applications need "unix,inet,inet6". "netlink" is the protocol |
85 | used to talk to Linux kernel. You'll only need this for applications such as [iproute2](http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2) for | 85 | used to talk to Linux kernel. You'll only need this for applications such as [iproute2](http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2) for |
86 | system administration, and "packet" is used by sniffers to talk directly with the Ethernet layer. | 86 | system administration, and "packet" is used by sniffers to talk directly with the Ethernet layer. |
87 | 87 | ||