From 63b1b45bfa893d329ddcb34773e3a0b653435f44 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Fri, 12 Feb 2016 11:52:07 -0500 Subject: seccomp fixes --- src/man/firejail.txt | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) (limited to 'src/man') diff --git a/src/man/firejail.txt b/src/man/firejail.txt index bdd1bb1f6..00f4cb367 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt @@ -1135,8 +1135,13 @@ add_key, request_key, keyctl, uselib, acct, modify_ldt, pivot_root, io_setup, io_destroy, io_getevents, io_submit, io_cancel, remap_file_pages, mbind, get_mempolicy, set_mempolicy, migrate_pages, move_pages, vmsplice, perf_event_open, chroot, -set_thread_area, tuxcall, reboot, mfsservctl and get_kernel_syms. When running on AMD64 architecture, -an equivalent 32-bit seccomp filter is also installed. +tuxcall, reboot, mfsservctl and get_kernel_syms. +.br + +.br +System architecture is not strictly imposed. The filter is applied +at run time only if the correct architecture was detected. For the case of I386 and AMD64 +both 32-bit and 64-bit filters are installed. .br .br -- cgit v1.2.3-54-g00ecf