From ce17788a48dfb059bf3fff5211d57f672d017ee9 Mon Sep 17 00:00:00 2001 From: Topi Miettinen Date: Sat, 11 Nov 2017 11:47:30 +0200 Subject: seccomp mdwx: block pkey_mprotect like mprotect --- src/man/firejail.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'src/man') diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 9f6da87ee..e0eb723bc 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt @@ -763,8 +763,8 @@ $ firejail \-\-machine-id Install a seccomp filter to block attempts to create memory mappings that are both writable and executable, to change mappings to be executable, or to create executable shared memory. The filter examines -the arguments of mmap, mmap2, mprotect and shmat system calls -and kills the process if necessary. +the arguments of mmap, mmap2, mprotect, pkey_mprotect and shmat system +calls and kills the process if necessary. .br .br -- cgit v1.2.3-54-g00ecf