From 9ac5ca7560087a25a7a95762f4f3f047e0637b4c Mon Sep 17 00:00:00 2001 From: Albert S Date: Tue, 2 Jan 2018 17:06:09 +0100 Subject: [PATCH] README.md spelling --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index cdfade2..7fca79a 100644 --- a/README.md +++ b/README.md @@ -11,7 +11,7 @@ Requirements You need an iptables version that supports cgroup matching (e. g. version >= 1.6); -The following kernel config paramaters must be set: +The following kernel config parameters must be set: CONFIG_NETFILTER_XT_MATCH_CGROUP CONFIG_NET_CLS_CGROUP @@ -61,7 +61,7 @@ Security discussion -------------------- This alone is not a satisfactory way to prevent misbehaving programs to contact destinations you don't want them to. While the restrictions -also apply to the children of the launched progorams, at a minimum, file +also apply to the children of the launched programs, at a minimum, file system isolation is also necessary and perhaps IPC etc. qsni however does not aim to be a complete "jailing/isolation" solution.