crtxcr/qsni
1
0
Förgrening 0
Kod Ärenden Pull-förfrågningar Släpp Wiki Aktiviteter

README.md spelling

Bläddra i källkod
This commit is contained in:
Albert S. 2018-01-02 17:06:09 +01:00
förälder dee275c89e
incheckning 9ac5ca7560
1 ändrade filer med 2 tillägg och 2 borttagningar
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
README.md
Visa fil

@ -11,7 +11,7 @@ Requirements
You need an iptables version that supports cgroup matching (e. g.
version >= 1.6);
The following kernel config paramaters must be set:
The following kernel config parameters must be set:
CONFIG_NETFILTER_XT_MATCH_CGROUP
CONFIG_NET_CLS_CGROUP
@ -61,7 +61,7 @@ Security discussion
--------------------
This alone is not a satisfactory way to prevent misbehaving programs
to contact destinations you don't want them to. While the restrictions
also apply to the children of the launched progorams, at a minimum, file
also apply to the children of the launched programs, at a minimum, file
system isolation is also necessary and perhaps IPC etc.
qsni however does not aim to be a complete "jailing/isolation" solution.