1 files changed, 4 insertions, 0 deletions

diff --git a/etc/firejail.config b/etc/firejail.config
index c671efef9..4b59f8955 100644
--- a/etc/firejail.config
+++ b/etc/firejail.config
@@ -101,6 +101,10 @@
 # Enable or disable seccomp support, default enabled.
 # seccomp yes
 
+# Add rules to the default seccomp filter. Same syntax as for --seccomp=
+# None by default; this is an example.
+# seccomp-filter-add !chroot,kcmp,mincore
+
 # Seccomp error action, kill, log or errno (EPERM, ENOSYS etc)
 # seccomp-error-action EPERM