summaryrefslogtreecommitdiff
path: root/man1
diff options
context:
space:
mode:
authorerdgeist <>2013-03-28 18:46:23 +0000
committererdgeist <>2013-03-28 18:46:23 +0000
commitdeece32718b2103d9230134a6ee9082f86eeee70 (patch)
tree8833bc753420b751f8a34944922052f2402d04f0 /man1
parent28fcbc589634cf68e233cbfb407a1eb19db32bcd (diff)
Document the -u switch
Diffstat (limited to 'man1')
-rw-r--r--man1/jaildaemon.112
1 files changed, 12 insertions, 0 deletions
diff --git a/man1/jaildaemon.1 b/man1/jaildaemon.1
index 2d5f654..b8f15cc 100644
--- a/man1/jaildaemon.1
+++ b/man1/jaildaemon.1
@@ -12,6 +12,7 @@
12.Nm 12.Nm
13.Cm Fl c Ar command Fl j Ar jid 13.Cm Fl c Ar command Fl j Ar jid
14.Op Fl rR 14.Op Fl rR
15.Op Fl u Ar uid
15.Op Fl t Ar proctitle 16.Op Fl t Ar proctitle
16.Op Fl f Ar ipcsockpath 17.Op Fl f Ar ipcsockpath
17.Sh DESCRIPTION 18.Sh DESCRIPTION
@@ -96,6 +97,17 @@ to complete before re-spawning the probe process.
96Use this option only if you know, what you're doing. Most shell scripts are 97Use this option only if you know, what you're doing. Most shell scripts are
97not re-entrant, even if their authors think so and most programs that run 98not re-entrant, even if their authors think so and most programs that run
98long enough should not be started twice with identical parameters. 99long enough should not be started twice with identical parameters.
100.It Fl u Ar uid
101Probes normally run as user root and thus can only be signalled by root
102inside the jail. For some use cases it is desirable to allow non-privileged
103processes inside the jail to signal the probe. You can use this switch to
104tell
105.Nm
106what uid to drop to after being jailed away. (Note that uids inside and
107outside the jail are never guaranteed to match.)
108.Pp
109Use this option only if you know, what you're doing. For most occasions it
110is a good idea to restrict signalling probes to the root user.
99.El 111.El
100.Pp 112.Pp
101Exactly one of the 113Exactly one of the