From 533242ac32590a47e76fc1ef5bfe48f32e1f131f Mon Sep 17 00:00:00 2001 From: smitsohu Date: Sun, 20 Jun 2021 13:29:48 +0200 Subject: augment seccomp lists in firejail.config --- etc/firejail.config | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'etc/firejail.config') diff --git a/etc/firejail.config b/etc/firejail.config index c671efef9..4b59f8955 100644 --- a/etc/firejail.config +++ b/etc/firejail.config @@ -101,6 +101,10 @@ # Enable or disable seccomp support, default enabled. # seccomp yes +# Add rules to the default seccomp filter. Same syntax as for --seccomp= +# None by default; this is an example. +# seccomp-filter-add !chroot,kcmp,mincore + # Seccomp error action, kill, log or errno (EPERM, ENOSYS etc) # seccomp-error-action EPERM -- cgit v1.2.3-54-g00ecf