From fb2406ff02ea1e4fe6a5d5840e5e24ad303330aa Mon Sep 17 00:00:00 2001 From: netblue30 Date: Sat, 9 Jul 2016 09:48:17 -0400 Subject: seccomp filter update --- src/man/firejail-profile.txt | 10 +--------- src/man/firejail.txt | 4 ++-- 2 files changed, 3 insertions(+), 11 deletions(-) (limited to 'src/man') diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt index 9c416b0f3..98fa17908 100644 --- a/src/man/firejail-profile.txt +++ b/src/man/firejail-profile.txt @@ -224,15 +224,7 @@ first argument to socket system call. Recognized values: \fBunix\fR, \fBinet\fR, \fBinet6\fR, \fBnetlink\fR and \fBpacket\fR. .TP \fBseccomp -Enable seccomp filter and blacklist the syscalls in the default list. The default list is as follows: -mount, umount2, ptrace, kexec_load, kexec_file_load, open_by_handle_at, init_module, finit_module, delete_module, -iopl, ioperm, swapon, swapoff, syslog, process_vm_readv, process_vm_writev, -sysfs,_sysctl, adjtimex, clock_adjtime, lookup_dcookie, perf_event_open, fanotify_init, kcmp, -add_key, request_key, keyctl, uselib, acct, modify_ldt, pivot_root, io_setup, -io_destroy, io_getevents, io_submit, io_cancel, -remap_file_pages, mbind, get_mempolicy, set_mempolicy, -migrate_pages, move_pages, vmsplice, perf_event_open, chroot, -tuxcall, reboot, mfsservctl and get_kernel_syms. +Enable seccomp filter and blacklist the syscalls in the default list. See man 1 firejail for more details. .TP \fBseccomp syscall,syscall,syscall Enable seccomp filter and blacklist the system calls in the list on top of default seccomp filter. diff --git a/src/man/firejail.txt b/src/man/firejail.txt index e915ab6cb..cb555980d 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt @@ -1206,8 +1206,8 @@ $ firejail \-\-net=eth0 \-\-scan .TP \fB\-\-seccomp Enable seccomp filter and blacklist the syscalls in the default list. The default list is as follows: -mount, umount2, ptrace, kexec_load, kexec_file_load, open_by_handle_at, init_module, finit_module, delete_module, -iopl, ioperm, swapon, swapoff, syslog, process_vm_readv, process_vm_writev, +mount, umount2, ptrace, kexec_load, kexec_file_load, name_to_handle_at, open_by_handle_at, create_module, init_module, finit_module, delete_module, +iopl, ioperm, ioprio_set, swapon, swapoff, syslog, process_vm_readv, process_vm_writev, sysfs,_sysctl, adjtimex, clock_adjtime, lookup_dcookie, perf_event_open, fanotify_init, kcmp, add_key, request_key, keyctl, uselib, acct, modify_ldt, pivot_root, io_setup, io_destroy, io_getevents, io_submit, io_cancel, -- cgit v1.2.3-70-g09d2