.TH sandbox.conf "5" "June 2010" "sandbox.conf" "Linux System Administration" .SH NAME sandbox.conf \- user config file for the SELinux sandbox .SH DESCRIPTION .PP When running sandbox with the -C argument, it will be confined using control groups and a system administrator can specify how the sandbox is confined. .PP Everything after "#" is ignored, as are empty lines. All arguments should be separated by and equals sign ("="). .PP These keywords are allowed. .RS .TP .B NAME The name of the sandbox control group. Default is "sandbox". .TP .B CPUAFFINITY Which cpus to assign sandbox to. The default is ALL, but users can specify a comma-separated list with dashes ("-") to represent ranges. Ex: 0-2,5 .TP .B MEMUSAGE How much memory to allow sandbox to use. The default is 80%. Users can specify either a percentage or a value in the form of a number followed by one of the suffixes K, M, G to denote kilobytes, megabytes or gigabytes respectively. Ex: 50% or 100M .TP .B CPUUSAGE Percentage of cpu sandbox should be allowed to use. The default is 80%. Specify a value followed by a percent sign ("%"). Ex: 50% .SH "SEE ALSO" .TP sandbox(8) .PP .SH AUTHOR This manual page was written by .I Thomas Liu