[master] 5353deb8a varnishd.1: Elaborate on the Linux jail

Nils Goroll nils.goroll at uplex.de
Thu Sep 12 13:33:05 UTC 2024


commit 5353deb8a8b432d58081023999c62b350810b574
Author: Thibaut Artis <thibaut.artis at varnish-software.com>
Date:   Wed Sep 11 17:22:01 2024 +0200

    varnishd.1: Elaborate on the Linux jail

diff --git a/doc/sphinx/reference/varnishd.rst b/doc/sphinx/reference/varnishd.rst
index 1ca94c7a5..13dab58f2 100644
--- a/doc/sphinx/reference/varnishd.rst
+++ b/doc/sphinx/reference/varnishd.rst
@@ -456,8 +456,11 @@ specific options. Available jails are:
 
 -j <linux[,user=`user`][,ccgroup=`group`][,workuser=`user`]>
 
-  Default on Linux platforms, it overloads the UNIX jail with
-  Linux-specific mechanisms.
+  Default on Linux platforms, it extends the UNIX jail with
+  Linux-specific mechanisms:
+
+  - warn when *workdir* is not in a ``tmpfs``
+  - try keeping the process dumpable after dropping privileges
 
 -j <unix[,user=`user`][,ccgroup=`group`][,workuser=`user`]>
 


More information about the varnish-commit mailing list