diff options
Diffstat (limited to 'src/firejail/usage.c')
-rw-r--r-- | src/firejail/usage.c | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/src/firejail/usage.c b/src/firejail/usage.c index 4de33c83d..10e6ab687 100644 --- a/src/firejail/usage.c +++ b/src/firejail/usage.c | |||
@@ -106,6 +106,10 @@ void usage(void) { | |||
106 | printf(" --mac=xx:xx:xx:xx:xx:xx - set interface MAC address.\n"); | 106 | printf(" --mac=xx:xx:xx:xx:xx:xx - set interface MAC address.\n"); |
107 | #endif | 107 | #endif |
108 | printf(" --machine-id - preserve /etc/machine-id\n"); | 108 | printf(" --machine-id - preserve /etc/machine-id\n"); |
109 | #ifdef HAVE_SECCOMP | ||
110 | printf(" --memory-deny-write-execute - seccomp filter to block attempts to create\n"); | ||
111 | printf("\tmemory mappings that are both writable and executable.\n"); | ||
112 | #endif | ||
109 | #ifdef HAVE_NETWORK | 113 | #ifdef HAVE_NETWORK |
110 | printf(" --mtu=number - set interface MTU.\n"); | 114 | printf(" --mtu=number - set interface MTU.\n"); |
111 | #endif | 115 | #endif |
@@ -179,12 +183,11 @@ void usage(void) { | |||
179 | printf(" --seccomp - enable seccomp filter and apply the default blacklist.\n"); | 183 | printf(" --seccomp - enable seccomp filter and apply the default blacklist.\n"); |
180 | printf(" --seccomp=syscall,syscall,syscall - enable seccomp filter, blacklist the\n"); | 184 | printf(" --seccomp=syscall,syscall,syscall - enable seccomp filter, blacklist the\n"); |
181 | printf("\tdefault syscall list and the syscalls specified by the command.\n"); | 185 | printf("\tdefault syscall list and the syscalls specified by the command.\n"); |
186 | printf(" --seccomp.block-secondary - build only the native architecture filters.\n"); | ||
182 | printf(" --seccomp.drop=syscall,syscall,syscall - enable seccomp filter, and\n"); | 187 | printf(" --seccomp.drop=syscall,syscall,syscall - enable seccomp filter, and\n"); |
183 | printf("\tblacklist the syscalls specified by the command.\n"); | 188 | printf("\tblacklist the syscalls specified by the command.\n"); |
184 | printf(" --seccomp.keep=syscall,syscall,syscall - enable seccomp filter, and\n"); | 189 | printf(" --seccomp.keep=syscall,syscall,syscall - enable seccomp filter, and\n"); |
185 | printf("\twhitelist the syscalls specified by the command.\n"); | 190 | printf("\twhitelist the syscalls specified by the command.\n"); |
186 | printf(" --seccomp.<errno>=syscall,syscall,syscall - enable seccomp filter, and\n"); | ||
187 | printf("\treturn errno for the syscalls specified by the command.\n"); | ||
188 | printf(" --seccomp.print=name|pid - print the seccomp filter for the sandbox\n"); | 191 | printf(" --seccomp.print=name|pid - print the seccomp filter for the sandbox\n"); |
189 | printf("\tidentified by name or PID.\n"); | 192 | printf("\tidentified by name or PID.\n"); |
190 | #endif | 193 | #endif |