From b69b4d15cc8de669e50ced9a4e5ad12d9320c0d7 Mon Sep 17 00:00:00 2001 From: Robert Swiecki Date: Thu, 24 May 2018 15:21:42 +0200 Subject: [PATCH] cmdline: better description for --seccomp_log --- README.md | 2 +- cmdline.cc | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index ac48d56..b0f4424 100644 --- a/README.md +++ b/README.md @@ -463,7 +463,7 @@ Options: --seccomp_string VALUE String with kafel seccomp-bpf policy (see kafel/) --seccomp_log - Use SECCOMP_FILTER_FLAG_LOG. Log all actions except SECCOMP_RET_ALLOW + Use SECCOMP_FILTER_FLAG_LOG. Log all actions except SECCOMP_RET_ALLOW. Supported since kernel version 4.14 --cgroup_mem_max VALUE Maximum number of bytes to use in the group (default: '0' - disabled) --cgroup_mem_mount VALUE diff --git a/cmdline.cc b/cmdline.cc index ca47468..33b5591 100644 --- a/cmdline.cc +++ b/cmdline.cc @@ -131,7 +131,7 @@ struct custom_option custom_opts[] = { { { "proc_rw", no_argument, NULL, 0x0606 }, "Is procfs mounted as R/W (default: R/O)" }, { { "seccomp_policy", required_argument, NULL, 'P' }, "Path to file containing seccomp-bpf policy (see kafel/)" }, { { "seccomp_string", required_argument, NULL, 0x0901 }, "String with kafel seccomp-bpf policy (see kafel/)" }, - { { "seccomp_log", no_argument, NULL, 0x0902 }, "Use SECCOMP_FILTER_FLAG_LOG. Log all actions except SECCOMP_RET_ALLOW)" }, + { { "seccomp_log", no_argument, NULL, 0x0902 }, "Use SECCOMP_FILTER_FLAG_LOG. Log all actions except SECCOMP_RET_ALLOW). Supported since kernel version 4.14" }, { { "cgroup_mem_max", required_argument, NULL, 0x0801 }, "Maximum number of bytes to use in the group (default: '0' - disabled)" }, { { "cgroup_mem_mount", required_argument, NULL, 0x0802 }, "Location of memory cgroup FS (default: '/sys/fs/cgroup/memory')" }, { { "cgroup_mem_parent", required_argument, NULL, 0x0803 }, "Which pre-existing memory cgroup to use as a parent (default: 'NSJAIL')" },