|
NAME | DESCRIPTION | SEE ALSO | AUTHOR | COLOPHON |
sandbox.conf(5) Linux System Administration sandbox.conf(5)
sandbox.conf - user config file for the SELinux sandbox
When running sandbox with the -C argument, it will be confined using
control groups and a system administrator can specify how the sandbox
is confined.
Everything after "#" is ignored, as are empty lines. All arguments
should be separated by and equals sign ("=").
These keywords are allowed.
NAME The name of the sandbox control group. Default is
"sandbox".
CPUAFFINITY
Which cpus to assign sandbox to. The default is ALL,
but users can specify a comma-separated list with
dashes ("-") to represent ranges. Ex: 0-2,5
MEMUSAGE
How much memory to allow sandbox to use. The default
is 80%. Users can specify either a percentage or a
value in the form of a number followed by one of the
suffixes K, M, G to denote kilobytes, megabytes or
gigabytes respectively. Ex: 50% or 100M
CPUUSAGE
Percentage of cpu sandbox should be allowed to use.
The default is 80%. Specify a value followed by a
percent sign ("%"). Ex: 50%
sandbox(8)
This manual page was written by Thomas Liu <tliu@fedoraproject.org>
This page is part of the selinux (Security-Enhanced Linux user-space
libraries and tools) project. Information about the project can be
found at ⟨https://github.com/SELinuxProject/selinux/wiki⟩. If you
have a bug report for this manual page, see
⟨https://github.com/SELinuxProject/selinux/wiki/Contributing⟩. This
page was obtained from the project's upstream Git repository
⟨https://github.com/SELinuxProject/selinux⟩ on 2017-07-05. If you
discover any rendering problems in this HTML version of the page, or
you believe there is a better or more up-to-date source for the page,
or you have corrections or improvements to the information in this
COLOPHON (which is not part of the original manual page), send a mail
to man-pages@man7.org
sandbox.conf June 2010 sandbox.conf(5)