Add new --seccomp_log option to docs

diff --git a/README.md b/README.md
index bff66f9..ac48d56 100644 (file)
--- a/README.md
+++ b/README.md
@@ -462,6 +462,8 @@ Options:
        Path to file containing seccomp-bpf policy (see kafel/)
  --seccomp_string VALUE
        String with kafel seccomp-bpf policy (see kafel/)
+ --seccomp_log
+       Use SECCOMP_FILTER_FLAG_LOG. Log all actions except SECCOMP_RET_ALLOW
  --cgroup_mem_max VALUE
        Maximum number of bytes to use in the group (default: '0' - disabled)
  --cgroup_mem_mount VALUE

diff --git a/nsjail.1 b/nsjail.1
index fafd542..937b360 100644 (file)
--- a/nsjail.1
+++ b/nsjail.1
@@ -205,6 +205,9 @@ Path to file containing seccomp\-bpf policy (see kafel/)
 \fB\-\-seccomp_string\fR VALUE
 String with kafel seccomp\-bpf policy (see kafel/)
 .TP
+\fB\-\-seccomp_log\fR
+Use SECCOMP_FILTER_FLAG_LOG. Log all actions except SECCOMP_RET_ALLOW
+.TP
 \fB\-\-cgroup_mem_max\fR VALUE
 Maximum number of bytes to use in the group (default: '0' \- disabled)
 .TP