diff options
Diffstat (limited to 'minijail0.5')
| -rw-r--r-- | minijail0.5 | 13 |
1 files changed, 7 insertions, 6 deletions
diff --git a/minijail0.5 b/minijail0.5 index 3e4f114..c0e18e8 100644 --- a/minijail0.5 +++ b/minijail0.5 @@ -1,4 +1,4 @@ -.TH MINIJAIL0 "5" "July 2011" "Chromium OS" "User Commands" +.TH MINIJAIL0 "5" "July 2011" "ChromiumOS" "User Commands" .SH NAME minijail0 \- sandbox a process .SH DESCRIPTION @@ -6,10 +6,11 @@ minijail0 \- sandbox a process Runs PROGRAM inside a sandbox. See \fBminijail0\fR(1) for details. .SH EXAMPLES -Safely switch from root to nobody while dropping all capabilities and -inheriting any groups from nobody: +Safely switch from user \fIroot\fR to \fInobody\fR, switch to primary group +\fInobody\fR, drop all capabilities, and inherit any supplementary groups from +user \fInobody\fR: - # minijail0 -c 0 -G -u nobody /usr/bin/whoami + # minijail0 -u nobody -g nobody -c 0 -G /usr/bin/whoami nobody Run in a PID and VFS namespace without superuser capabilities (but still @@ -183,9 +184,9 @@ will occupy a single line, without '=' and value. Otherwise, any string that is given after the '=' is interpreted as the argument. .SH AUTHOR -The Chromium OS Authors <chromiumos-dev@chromium.org> +The ChromiumOS Authors <chromiumos-dev@chromium.org> .SH COPYRIGHT -Copyright \(co 2011 The Chromium OS Authors +Copyright \(co 2011 The ChromiumOS Authors License BSD-like. .SH "SEE ALSO" .BR minijail0 (1) |