diff options
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/man/man3/seccomp_api_get.3 | 2 | ||||
| -rw-r--r-- | doc/man/man3/seccomp_init.3 | 5 | ||||
| -rw-r--r-- | doc/man/man3/seccomp_rule_add.3 | 4 |
3 files changed, 10 insertions, 1 deletions
diff --git a/doc/man/man3/seccomp_api_get.3 b/doc/man/man3/seccomp_api_get.3 index b6c0453..0def686 100644 --- a/doc/man/man3/seccomp_api_get.3 +++ b/doc/man/man3/seccomp_api_get.3 @@ -49,7 +49,7 @@ the syscall to load the seccomp filter into the kernel. .TP .B 3 -The SCMP_FLTATR_CTL_LOG filter attribute is supported. +The SCMP_FLTATR_CTL_LOG filter attribute and the SCMP_ACT_LOG action are supported. .\" ////////////////////////////////////////////////////////////////////////// .SH RETURN VALUE .\" ////////////////////////////////////////////////////////////////////////// diff --git a/doc/man/man3/seccomp_init.3 b/doc/man/man3/seccomp_init.3 index 65f9a7f..d7cd383 100644 --- a/doc/man/man3/seccomp_init.3 +++ b/doc/man/man3/seccomp_init.3 @@ -79,6 +79,11 @@ can be retrieved using the .B PTRACE_GETEVENTMSG option. .TP +.B SCMP_ACT_LOG +The seccomp filter will have no effect on the thread calling the syscall if it +does not match any of the configured seccomp filter rules but the syscall will +be logged. +.TP .B SCMP_ACT_ALLOW The seccomp filter will have no effect on the thread calling the syscall if it does not match any of the configured seccomp filter rules. diff --git a/doc/man/man3/seccomp_rule_add.3 b/doc/man/man3/seccomp_rule_add.3 index afb173a..86c53b1 100644 --- a/doc/man/man3/seccomp_rule_add.3 +++ b/doc/man/man3/seccomp_rule_add.3 @@ -133,6 +133,10 @@ can be retrieved using the .B PTRACE_GETEVENTMSG option. .TP +.B SCMP_ACT_LOG +The seccomp filter will have no effect on the thread calling the syscall if it +matches the filter rule but the syscall will be logged. +.TP .B SCMP_ACT_ALLOW The seccomp filter will have no effect on the thread calling the syscall if it matches the filter rule. |