configs/ - add comments to config files using #

configs/apache.cfg

@@ -1,4 +1,7 @@
+# Example config for nsjail
+
 name: "apache-with-cloned-net"
+
 description: "Tested under Ubuntu 17.04. Other Linux distros might "
 description: "use different locations for the Apache's HTTPD configuration "
 description: "files and system libraries"

configs/bash-with-fake-geteuid.cfg

@@ -1,4 +1,7 @@
+# Example config for nsjail
+
 name: "bash-with-fake-geteuid"
+
 description: "An example/demo policy which allows to execute /bin/bash and other commands in "
 description: "a fairly restricted jail containing only some directories from the main "
 description: "system, and with blocked __NR_syslog syscall. Also, __NR_geteuid returns -1337 "

configs/demo-dont-use-chrome-with-net.cfg

@@ -1,3 +1,5 @@
+# Example config for nsjail
+
 name: "chrome-with-net"
 
 description: "Don't use for anything serious - this is just a demo policy. See notes"

configs/firefox-with-cloned-net.cfg

@@ -1,3 +1,5 @@
+# Example config for nsjail
+
 name: "firefox-with-cloned-net"
 
 description: "This policy allows to run firefox inside a jail on a separate eth interface."

configs/firefox-with-net.cfg

@@ -1,3 +1,5 @@
+# Example config for nsjail
+
 name: "firefox-with-net"
 
 description: "This policy allows to run firefox inside a jail. Access to networking is"

configs/home-documents-with-xorg-no-net.cfg

@@ -1,3 +1,5 @@
+# Example config for nsjail
+
 name: "documents-with-xorg"
 
 description: "This policy allows to run many X-org based tool, which are allowed"

configs/imagemagick-convert.cfg

@@ -1,3 +1,5 @@
+# Example config for nsjail
+
 name: "imagemagick-convert"
 
 description: "This policy allows to run ImageMagick's convert inside a jail."

configs/static-busybox-with-execveat.cfg

@@ -1,3 +1,5 @@
+# Example config for nsjail
+
 name: "static-busybox-with-execveat"
 description: "An example/demo policy which allows to execute /bin/busybox-static in an "
 description: "empty (only /proc) mount namespace which doesn't even include busybox itself"

configs/tomcat8.cfg

@@ -1,4 +1,7 @@
+# Example config for nsjail
+
 name: "tomcat8"
+
 description: "Tested under Ubuntu 16.04 with tomcat8=8.0.32-1ubuntu1.9,"
 description: "libnl-route-3-200=3.2.27-1ubuntu0.16.04.1,"
 description: "libprotobuf9v5=2.6.1-1.3,"

configs/xchat-with-net.cfg

@@ -1,3 +1,5 @@
+# Example config for nsjail
+
 name: "xchat-with-net"
 
 description: "This policy allows to run xchat inside a jail. Access to networking is"

configs/znc-with-net.cfg

@@ -1,3 +1,5 @@
+# Example config for nsjail
+
 name: "znc-with-net"
 
 description: "This policy allows to run znc a jail. "

kafel

@@ -1 +1 @@
-Subproject commit 6282b5e612f83a3b7020eb816cff354fd0c0597d
+Subproject commit d1768389e218f5b31258a4a35855b1372a3b8bef