diff options
Diffstat (limited to 'src/firejail/firejail.h')
-rw-r--r-- | src/firejail/firejail.h | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/src/firejail/firejail.h b/src/firejail/firejail.h index 7391a8994..dae2dfd7b 100644 --- a/src/firejail/firejail.h +++ b/src/firejail/firejail.h | |||
@@ -182,9 +182,9 @@ typedef struct config_t { | |||
182 | char *dns4; | 182 | char *dns4; |
183 | 183 | ||
184 | // seccomp | 184 | // seccomp |
185 | char *seccomp_list;// optional seccomp list on top of default filter | 185 | char *seccomp_list, *seccomp_list32; // optional seccomp list on top of default filter |
186 | char *seccomp_list_drop; // seccomp drop list | 186 | char *seccomp_list_drop, *seccomp_list_drop32; // seccomp drop list |
187 | char *seccomp_list_keep; // seccomp keep list | 187 | char *seccomp_list_keep, *seccomp_list_keep32; // seccomp keep list |
188 | char *protocol; // protocol list | 188 | char *protocol; // protocol list |
189 | 189 | ||
190 | // rlimits | 190 | // rlimits |
@@ -270,6 +270,7 @@ extern int arg_overlay_keep; // place overlay diff in a known directory | |||
270 | extern int arg_overlay_reuse; // allow the reuse of overlays | 270 | extern int arg_overlay_reuse; // allow the reuse of overlays |
271 | 271 | ||
272 | extern int arg_seccomp; // enable default seccomp filter | 272 | extern int arg_seccomp; // enable default seccomp filter |
273 | extern int arg_seccomp32; // enable default seccomp filter for 32 bit arch | ||
273 | extern int arg_seccomp_postexec; // need postexec ld.preload library? | 274 | extern int arg_seccomp_postexec; // need postexec ld.preload library? |
274 | extern int arg_seccomp_block_secondary; // block any secondary architectures | 275 | extern int arg_seccomp_block_secondary; // block any secondary architectures |
275 | 276 | ||
@@ -568,8 +569,8 @@ void fs_private_home_list(void); | |||
568 | char *seccomp_check_list(const char *str); | 569 | char *seccomp_check_list(const char *str); |
569 | int seccomp_install_filters(void); | 570 | int seccomp_install_filters(void); |
570 | int seccomp_load(const char *fname); | 571 | int seccomp_load(const char *fname); |
571 | int seccomp_filter_drop(void); | 572 | int seccomp_filter_drop(bool native); |
572 | int seccomp_filter_keep(void); | 573 | int seccomp_filter_keep(bool native); |
573 | void seccomp_print_filter(pid_t pid); | 574 | void seccomp_print_filter(pid_t pid); |
574 | 575 | ||
575 | // caps.c | 576 | // caps.c |