summaryrefslogtreecommitdiff
path: root/doc/source/features.rst
diff options
context:
space:
mode:
authorjvoisin2018-01-12 10:55:50 +0100
committerjvoisin2018-01-12 10:55:50 +0100
commit5da0c0fa9351a758e28941a7d0b1755dd57fea9b (patch)
tree69981e9baf30548809f0c2794de9d1e2e03aee88 /doc/source/features.rst
parent49a27fac20f757c158e5faa18a41337c5f33b17b (diff)
Improve a bit the documentation
Diffstat (limited to 'doc/source/features.rst')
-rw-r--r--doc/source/features.rst3
1 files changed, 3 insertions, 0 deletions
diff --git a/doc/source/features.rst b/doc/source/features.rst
index 8ecf57d..86b81fd 100644
--- a/doc/source/features.rst
+++ b/doc/source/features.rst
@@ -273,6 +273,9 @@ disable them - at the risk of breaking critical features.
273 273
274Snuffleupagus allows the user to restrict usage of specific functions per file, or per 274Snuffleupagus allows the user to restrict usage of specific functions per file, or per
275file with a matching (sha256) hash, thus allowing the use of such functions **only** in the intended places. 275file with a matching (sha256) hash, thus allowing the use of such functions **only** in the intended places.
276It can also restrict per `CIDR <https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing>`__,
277to restrict execution to users on the LAN for example. There are a *lot*
278of different filters, so make sure to read the :ref:`corresponding documentation <virtual-patching-config>`.
276 279
277Furthermore, running the `following script <https://github.com/nbs-system/snuffleupagus/blob/master/scripts/generate_rules.php>`_ will generate an hash and line-based whitelist 280Furthermore, running the `following script <https://github.com/nbs-system/snuffleupagus/blob/master/scripts/generate_rules.php>`_ will generate an hash and line-based whitelist
278of dangerous functions, droping them everywhere else: 281of dangerous functions, droping them everywhere else: