[RFC PATCH v1 6/6] doc: proc: Add description of subset=allowlist
Alexey Gladkov <[email protected]> Wed, 25 Jan 2023 16:28:53 +0100
| Newsgroups | dev.linux.lists.containers,org.kernel.vger.linux-fsdevel,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <bd6f2882a63521a33d68e3f6dc1fb1e71c7c37d2.1674660533.git.legion@kernel.org> |
Signed-off-by: Alexey Gladkov <[email protected]> --- Documentation/filesystems/proc.rst | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/Documentation/filesystems/proc.rst b/Documentation/filesystems/proc.rst index e224b6d5b642..c2598bca8193 100644 --- a/Documentation/filesystems/proc.rst +++ b/Documentation/filesystems/proc.rst @@ -2213,6 +2213,16 @@ information about processes information, just add identd to this group. subset=pid hides all top level files and directories in the procfs that are not related to tasks. +subset=allowlist allows you to specify a list of files and directories to +which you want to provide access. If the option is specified, then the +/proc/allowlist will appear at the top level of the filesystem. By default, this +file contains only its name. The user can add or remove other filenames and +directories. To prohibit editing the allowlist, you need to exclude its name +from the list of allowed ones. + +Different subset= option arguments can be combined using the plus(+) delimiter. +For example: subset=pid+allowlist + Chapter 5: Filesystem behavior ============================== -- 2.33.6