summaryrefslogtreecommitdiff
path: root/bwrap.xml
diff options
context:
space:
mode:
authorDan Walsh <dwalsh@redhat.com>2016-03-17 18:03:02 -0400
committerColin Walters (automation) <walters+githubbot@verbum.org>2016-03-22 09:33:46 +0000
commit506fb1b1624358d57095b20408414ccef6fbc22c (patch)
tree60a7e6e77613e129334b80f31834dedb3fab13b5 /bwrap.xml
parentaedbc794d5cc3f5c479c7307054a761f388d2941 (diff)
downloadbubblewrap-506fb1b1624358d57095b20408414ccef6fbc22c.tar.gz
Add SELinux Support
Signed-off-by: Dan Walsh <dwalsh@redhat.com> Pull request: #25 Approved by: alexlarsson
Diffstat (limited to 'bwrap.xml')
-rw-r--r--bwrap.xml14
1 files changed, 14 insertions, 0 deletions
diff --git a/bwrap.xml b/bwrap.xml
index a6bb8a6..2dd1baa 100644
--- a/bwrap.xml
+++ b/bwrap.xml
@@ -205,6 +205,20 @@
as generated by seccomp_export_bpf.
</para></listitem>
</varlistentry>
+ <varlistentry>
+ <term><option>--exec-label <arg choice="plain">LABEL</arg></option></term>
+ <listitem><para>
+ Exec Label from the sandbox. On an SELinux system you can specify the SELinux
+ context for the sandbox process(s).
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term><option>--file-label <arg choice="plain">LABEL</arg></option></term>
+ <listitem><para>
+ File label for temporary sandbox content. On an SELinux system you can specify
+ the SELinux context for the sandbox content.
+ </para></listitem>
+ </varlistentry>
</variablelist>
</refsect1>