document profile support for allow-debuggers in firejail-profile man page (#2861)

This commit is contained in:
Sebastian Hafner 2019-07-17 19:08:48 +02:00 committed by rusty-snake
parent cac87558fd
commit 008bc7fedc

View file

@ -336,6 +336,9 @@ directory, and a skeleton filesystem is created based on the original /var/log.
.SH Security filters
The following security filters are currently implemented:
.TP
\fBallow-debuggers
Allow tools such as strace and gdb inside the sandbox by whitelisting system calls ptrace and process_vm_readv.
.TP
\fBapparmor
Enable AppArmor confinement.