From 66e526598e5334add87c1ce5d880ed7151adaa35 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Thu, 29 Oct 2015 08:35:00 -0400 Subject: readme.md --- README.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) (limited to 'README.md') diff --git a/README.md b/README.md index 822c455e8..36cebdcba 100644 --- a/README.md +++ b/README.md @@ -80,16 +80,16 @@ Enable protocol filter. It is based on seccomp and it filters the first argument If the value is not recognized, seccomp will kill the process. Valid values: unix, inet, inet6, netlink and packet. -"unix" describes the regular Unix socket connections, -and "inet" and "inet6" describe the regular IPv4 and IPv6 traffic. Most GUI applications need "unix,inet,inet6". "netlink" is the protocol -used to talk to Linux kernel. You'll only need this for applications such as [iproute2](http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2) for -system administration, and "packet" is used by sniffers to talk directly with the Ethernet layer. - Example: ````` $ firejail --protocol=unix,inet,inet6 ````` +"unix" describes the regular Unix socket connections, +and "inet" and "inet6" describe the regular IPv4 and IPv6 traffic. Most GUI applications need "unix,inet,inet6". "netlink" is the protocol +used to talk to Linux kernel. You'll only need this for applications such as [iproute2](http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2) +used in system administration, and "packet" is used by sniffers to talk directly with the Ethernet layer. + Protocol filter is enabled in all default security profiles for GUI applications ("protocol unix,inet,inet6"). ### Dual i386/amd64 seccomp filter -- cgit v1.2.3-54-g00ecf