|
NAME | DESCRIPTION | SEE ALSO | AUTHOR | COLOPHON |
|
sandbox.conf(5) Linux System Administration sandbox.conf(5)
sandbox.conf - user config file for the SELinux sandbox
When running sandbox with the -C argument, it will be confined using
control groups and a system administrator can specify how the sandbox
is confined.
Everything after "#" is ignored, as are empty lines. All arguments
should be separated by and equals sign ("=").
These keywords are allowed.
NAME The name of the sandbox control group. Default is
"sandbox".
CPUAFFINITY
Which cpus to assign sandbox to. The default is ALL,
but users can specify a comma-separated list with
dashes ("-") to represent ranges. Ex: 0-2,5
MEMUSAGE
How much memory to allow sandbox to use. The default
is 80%. Users can specify either a percentage or a
value in the form of a number followed by one of the
suffixes K, M, G to denote kilobytes, megabytes or
gigabytes respectively. Ex: 50% or 100M
CPUUSAGE
Percentage of cpu sandbox should be allowed to use.
The default is 80%. Specify a value followed by a
percent sign ("%"). Ex: 50%
sandbox(8)
This manual page was written by Thomas Liu <tliu@fedoraproject.org>
This page is part of the selinux (Security-Enhanced Linux user-space
libraries and tools) project. Information about the project can be
found at ⟨https://github.com/SELinuxProject/selinux/wiki⟩. If you
have a bug report for this manual page, see
⟨https://github.com/SELinuxProject/selinux/wiki/Contributing⟩. This
page was obtained from the project's upstream Git repository
⟨https://github.com/SELinuxProject/selinux⟩ on 2018-02-02. (At that
time, the date of the most recent commit that was found in the repos‐
itory was 2018-01-25.) If you discover any rendering problems in
this HTML version of the page, or you believe there is a better or
more up-to-date source for the page, or you have corrections or
improvements to the information in this COLOPHON (which is not part
of the original manual page), send a mail to man-pages@man7.org
sandbox.conf June 2010 sandbox.conf(5)