aboutsummaryrefslogtreecommitdiffstats
path: root/src/firejail/firejail.h
diff options
context:
space:
mode:
Diffstat (limited to 'src/firejail/firejail.h')
-rw-r--r--src/firejail/firejail.h11
1 files changed, 6 insertions, 5 deletions
diff --git a/src/firejail/firejail.h b/src/firejail/firejail.h
index 7391a8994..dae2dfd7b 100644
--- a/src/firejail/firejail.h
+++ b/src/firejail/firejail.h
@@ -182,9 +182,9 @@ typedef struct config_t {
182 char *dns4; 182 char *dns4;
183 183
184 // seccomp 184 // seccomp
185 char *seccomp_list;// optional seccomp list on top of default filter 185 char *seccomp_list, *seccomp_list32; // optional seccomp list on top of default filter
186 char *seccomp_list_drop; // seccomp drop list 186 char *seccomp_list_drop, *seccomp_list_drop32; // seccomp drop list
187 char *seccomp_list_keep; // seccomp keep list 187 char *seccomp_list_keep, *seccomp_list_keep32; // seccomp keep list
188 char *protocol; // protocol list 188 char *protocol; // protocol list
189 189
190 // rlimits 190 // rlimits
@@ -270,6 +270,7 @@ extern int arg_overlay_keep; // place overlay diff in a known directory
270extern int arg_overlay_reuse; // allow the reuse of overlays 270extern int arg_overlay_reuse; // allow the reuse of overlays
271 271
272extern int arg_seccomp; // enable default seccomp filter 272extern int arg_seccomp; // enable default seccomp filter
273extern int arg_seccomp32; // enable default seccomp filter for 32 bit arch
273extern int arg_seccomp_postexec; // need postexec ld.preload library? 274extern int arg_seccomp_postexec; // need postexec ld.preload library?
274extern int arg_seccomp_block_secondary; // block any secondary architectures 275extern int arg_seccomp_block_secondary; // block any secondary architectures
275 276
@@ -568,8 +569,8 @@ void fs_private_home_list(void);
568char *seccomp_check_list(const char *str); 569char *seccomp_check_list(const char *str);
569int seccomp_install_filters(void); 570int seccomp_install_filters(void);
570int seccomp_load(const char *fname); 571int seccomp_load(const char *fname);
571int seccomp_filter_drop(void); 572int seccomp_filter_drop(bool native);
572int seccomp_filter_keep(void); 573int seccomp_filter_keep(bool native);
573void seccomp_print_filter(pid_t pid); 574void seccomp_print_filter(pid_t pid);
574 575
575// caps.c 576// caps.c