From 6338c7763663340d1db8abc91926a989d5c6b843 Mon Sep 17 00:00:00 2001 From: YAMAMOTO Masaya Date: Wed, 25 Oct 2017 17:56:14 +0900 Subject: [PATCH] Update documents --- README.md | 6 ++++++ nsjail.1 | 9 +++++++++ 2 files changed, 15 insertions(+) diff --git a/README.md b/README.md index 948b5e0..c2bc14a 100644 --- a/README.md +++ b/README.md @@ -462,6 +462,12 @@ Options: Location of pids cgroup FS (default: '/sys/fs/cgroup/pids') --cgroup_pids_parent VALUE Which pre-existing pids cgroup to use as a parent (default: 'NSJAIL') + --cgroup_net_cls_classid VALUE + Class identifier of network packets in the group (default: '0' - disabled) + --cgroup_net_cls_mount VALUE + Location of net_cls cgroup FS (default: '/sys/fs/cgroup/net_cls') + --cgroup_net_cls_parent VALUE + Which pre-existing net_cls cgroup to use as a parent (default: 'NSJAIL') --iface_no_lo Don't bring up the 'lo' interface --macvlan_iface|-I VALUE diff --git a/nsjail.1 b/nsjail.1 index 2c56ab2..5064e68 100644 --- a/nsjail.1 +++ b/nsjail.1 @@ -220,6 +220,15 @@ Location of pids cgroup FS (default: '/sys/fs/cgroup/pids') \fB\-\-cgroup_pids_parent\fR VALUE Which pre\-existing pids cgroup to use as a parent (default: 'NSJAIL') .TP +\fB\-\-cgroup_net_cls_classid\fR VALUE +Class identifier of network packets in the group (default: '0' \- disabled) +.TP +\fB\-\-cgroup_net_cls_mount\fR VALUE +Location of net_cls cgroup FS (default: '/sys/fs/cgroup/net_cls') +.TP +\fB\-\-cgroup_net_cls_parent\fR VALUE +Which pre\-existing net_cls cgroup to use as a parent (default: 'NSJAIL') +.TP \fB\-\-iface_no_lo\fR Don't bring up the 'lo' interface .TP