Commit d89c1799 authored by Nick Mathewson's avatar Nick Mathewson 🦀
Browse files

manual: Describe Sandbox more accurately. 

Closes #23378
parent 04926126

changes/ticket23378

0 → 100644
+4 −0
Original line number Diff line number Diff line 
  o Documentation (manual page):

    - Describe the status of the "Sandbox" option more accurately. It is no

      longer "experimental", but it _is_ dependent on kernel and libc

      versions. Closes ticket 23378.

doc/man/tor.1.txt

+5 −4
Original line number Diff line number Diff line
@@ -839,10 +839,11 @@ forward slash (/) in the configuration file and on the command line. 


[[Sandbox]] **Sandbox** **0**|**1**::

    If set to 1, Tor will run securely through the use of a syscall sandbox.

    Otherwise the sandbox will be disabled. The option is currently an

    experimental feature. It only works on Linux-based operating systems,

    and only when Tor has been built with the libseccomp library. This option

    can not be changed while tor is running. +

    Otherwise the sandbox will be disabled. The option only works on

    Linux-based operating systems, and only when Tor has been built with the

    libseccomp library.  Note that this option may be incompatible with some

    versions of libc, and some kernel versions.  This option can not be

    changed while tor is running. +

     +

    When the **Sandbox** is 1, the following options can not be changed when tor

    is running: