commit debe6cb0198d47f671f72bc0aa4dacea75bdf891
parent 60bc618c3feaf80dff54dec501447d9417278ab0
Author: Frederic Cambus <fred@statdns.com>
Date: Mon, 14 Sep 2020 23:02:41 +0200
Mention the seccomp_tracing configuration option.
Diffstat:
1 file changed, 5 insertions(+), 0 deletions(-)
diff --git a/conf/kore.conf.example b/conf/kore.conf.example
@@ -209,6 +209,11 @@ validator v_session function v_session_validate
# By default Kore will use the following promises: "stdio rpath inet error"
#pledge dns wpath
+# seccomp specific settings.
+# If set to "yes", Kore will trace its child processes and properly
+# log seccomp violations while still allowing the syscalls.
+#seccomp_tracing yes
+
# Authentication configuration
#
# Using authentication blocks you can define a standard way for