[PR #7065] [MERGED] docs: man: clarify --debug-syscalls for seccomp #6299

Closed
opened 2026-05-05 10:54:23 -06:00 by gitea-mirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/7065
Author: @kmk3
Created: 2/17/2026
Status: Merged
Merged: 2/18/2026
Merged by: @kmk3

Base: masterHead: docs-seccomp-add-debug-syscalls


📝 Commits (2)

  • 774b427 docs: man: mention --debug-syscalls for seccomp
  • ef60ecd docs: man: clarify --debug-syscalls

📊 Changes

1 file changed (+36 additions, -3 deletions)

View changed files

📝 src/man/firejail.1.in (+36 -3)

📄 Description

Some syscalls have multiple versions, which may lead to confusion as to
which is the correct syscall name.

For example, uname has two older obsolete versions (see uname(2)):

  • __NR_oldolduname
  • __NR_olduname
  • __NR_uname

But only the most recent one is exposed by the syscall map for the
x86_64 architecture:

$ firejail --debug-syscalls | grep uname
63      - uname

Mention --debug-syscalls / --debug-syscalls32 as a way to find the
proper syscall names to be used with --seccomp / --seccomp.32.

Relates to #7063 #7064.

Reported-by: @cobratbq


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/7065 **Author:** [@kmk3](https://github.com/kmk3) **Created:** 2/17/2026 **Status:** ✅ Merged **Merged:** 2/18/2026 **Merged by:** [@kmk3](https://github.com/kmk3) **Base:** `master` ← **Head:** `docs-seccomp-add-debug-syscalls` --- ### 📝 Commits (2) - [`774b427`](https://github.com/netblue30/firejail/commit/774b42701fa66086d85b4dc575caf60ee98e73d5) docs: man: mention --debug-syscalls for seccomp - [`ef60ecd`](https://github.com/netblue30/firejail/commit/ef60ecd808a2f1ffa883843554b0ec9081194687) docs: man: clarify --debug-syscalls ### 📊 Changes **1 file changed** (+36 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `src/man/firejail.1.in` (+36 -3) </details> ### 📄 Description Some syscalls have multiple versions, which may lead to confusion as to which is the correct syscall name. For example, `uname` has two older obsolete versions (see `uname(2)`): * `__NR_oldolduname` * `__NR_olduname` * `__NR_uname` But only the most recent one is exposed by the syscall map for the `x86_64` architecture: $ firejail --debug-syscalls | grep uname 63 - uname Mention `--debug-syscalls` / `--debug-syscalls32` as a way to find the proper syscall names to be used with `--seccomp` / `--seccomp.32`. Relates to #7063 #7064. Reported-by: @cobratbq --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
gitea-mirror 2026-05-05 10:54:23 -06:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#6299
No description provided.