From 0533d6cbf29cdcd523aee57291cc0ff1dc72070f Mon Sep 17 00:00:00 2001 From: rusty-snake <41237666+rusty-snake@users.noreply.github.com> Date: Thu, 7 Jan 2021 13:53:56 +0100 Subject: update manpages and RELNOTES --- src/man/firejail-profile.txt | 5 +++++ src/man/firejail.txt | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt index 9524254c1..030a3c95c 100644 --- a/src/man/firejail-profile.txt +++ b/src/man/firejail-profile.txt @@ -861,6 +861,11 @@ Use this option when you want to assign an IP address in a new namespace and the parent interface specified by --net is not configured. An IP address and a default gateway address also have to be added. +.TP +\fBnetns namespace +Run the program in a named, persistent network namespace. These can +be created and configured using "ip netns". + .TP \fBveth-name name Use this name for the interface connected to the bridge for --net=bridge_interface commands, diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 347e2b31b..e72ef48c2 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt @@ -2273,7 +2273,7 @@ rm: cannot remove `testfile': Operation not permitted .TP \fB\-\-seccomp.keep=syscall,@group,!syscall2 Enable seccomp filter, blacklist all syscall not listed and "syscall2". -The system calls needed by Firejail (group @default-keep: prctl, execve) +The system calls needed by Firejail (group @default-keep: prctl, execve, execveat) are handled with the preload library. On a 64 bit architecture, an additional filter for 32 bit system calls can be installed with \-\-seccomp.32.keep. -- cgit v1.2.3-70-g09d2