From aac16b9d3659ac3831a4448c930db436852e586b Mon Sep 17 00:00:00 2001 From: netblue30 Date: Wed, 28 Oct 2015 09:14:22 -0400 Subject: cleanup --- src/man/firejail.txt | 22 +++++++++++++++++++++- 1 file changed, 21 insertions(+), 1 deletion(-) (limited to 'src/man/firejail.txt') diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 12c32f4c7..52b75afaa 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt @@ -23,7 +23,7 @@ firejail {\-\-list | \-\-netstats | \-\-top | \-\-tree} Miscellaneous: .PP .RS -firejail {\-? | \-\-debug-caps | \-\-debug-errnos | \-\-debug-syscalls | \-\-help | \-\-version} +firejail {\-? | \-\-debug-caps | \-\-debug-errnos | \-\-debug-syscalls | \-\-debug-protocols | \-\-help | \-\-version} .RE .SH DESCRIPTION Firejail is a SUID sandbox program that reduces the risk of security breaches by @@ -258,6 +258,15 @@ Example: .br $ firejail \-\-debug-errnos .TP +\fB\-\-debug-protocols +Print all recognized protocols in the current Firejail software build and exit. +.br + +.br +Example: +.br +$ firejail \-\-debug-protocols +.TP \fB\-\-debug-syscalls Print all recognized system calls in the current Firejail software build and exit. .br @@ -842,6 +851,17 @@ For more information, see SECURITY PROFILES section below. Example: .br $ firejail \-\-profile=myprofile + +.TP +\fB\-\-protocol=protocol,protocol,protocol +Enable protocol filter. The filter is based on seccomp and the first argument to socket system call. +Recognized values: unix, inet, inet6, netlink and packet. +.br + +.br +Example: +.br +$ firejail \-\-protocol=unix,inet,inet6 firefox .TP \fB\-\-quiet Turn off Firejail's output. -- cgit v1.2.3-70-g09d2