Merge pull request #6930 from kmk3/docs-clarify-ipc-namespace

docs: man: clarify what ipc-namespace affects
This commit is contained in:
Kelvin M. Klann 2025-10-10 11:38:46 +00:00 committed by GitHub
commit ff6fb07132
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 18 additions and 3 deletions

View file

@ -836,7 +836,15 @@ env CFLAGS="-W -Wall -Werror"
.TP
\fBipc-namespace
Enable IPC namespace.
Enable a new IPC namespace if the sandbox was started as a regular user.
IPC namespace is enabled by default for sandboxes started as root.
.br
.br
Note: This only affects the IPC resources that are mentioned in
\fBipc_namespaces\fR(7).
It does not affect other IPC resources, such as Unix sockets (see
\fBunix\fR(7)).
.TP
\fBkeep-fd

View file

@ -1117,8 +1117,15 @@ $ firejail \-\-net=eth0 \-\-iprange=192.168.1.100,192.168.1.150
.TP
\fB\-\-ipc-namespace
Enable a new IPC namespace if the sandbox was started as a regular user. IPC namespace is enabled by default
for sandboxes started as root.
Enable a new IPC namespace if the sandbox was started as a regular user.
IPC namespace is enabled by default for sandboxes started as root.
.br
.br
Note: This only affects the IPC resources that are mentioned in
\fBipc_namespaces\fR(7).
It does not affect other IPC resources, such as Unix sockets (see
\fBunix\fR(7)).
.br
.br