From ef513cc6350eb6c437037fa06434c09d036ac174 Mon Sep 17 00:00:00 2001 From: Stefan Grundmann Date: Wed, 31 May 2017 23:20:22 +0000 Subject: document the -g switch --- man1/jaildaemon.1 | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/man1/jaildaemon.1 b/man1/jaildaemon.1 index 194cac0..cdbcb99 100644 --- a/man1/jaildaemon.1 +++ b/man1/jaildaemon.1 @@ -13,6 +13,7 @@ .Cm Fl c Ar command Fl j Ar jid .Op Fl rR .Op Fl u Ar uid +.Op Fl g Ar gid .Op Fl t Ar proctitle .Op Fl f Ar ipcsockpath .Sh DESCRIPTION @@ -108,6 +109,10 @@ outside the jail are never guaranteed to match.) .Pp Use this option only if you know, what you're doing. For most occasions it is a good idea to restrict signalling probes to the root user. +.Pp +.It Fl g Ar gid +Set the group ID of the probe process. Useful together with the -u switch on +hosts where security.bsd.see_other_gids=0. .El .Pp Exactly one of the -- cgit v1.2.3