aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlbert S2018-01-02 17:06:09 +0100
committerAlbert S2018-01-02 17:06:09 +0100
commit9ac5ca7560087a25a7a95762f4f3f047e0637b4c (patch)
tree88c931d91657603a86831a8199dd8ad57c949031
parentdee275c89e23079e39ad4ab0021f58aca5e5822d (diff)
downloadqsni-9ac5ca7560087a25a7a95762f4f3f047e0637b4c.tar.gz
qsni-9ac5ca7560087a25a7a95762f4f3f047e0637b4c.tar.bz2
README.md spelling
-rw-r--r--README.md4
1 files changed, 2 insertions, 2 deletions
diff --git a/README.md b/README.md
index cdfade2..7fca79a 100644
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@ Requirements
You need an iptables version that supports cgroup matching (e. g.
version >= 1.6);
-The following kernel config paramaters must be set:
+The following kernel config parameters must be set:
CONFIG_NETFILTER_XT_MATCH_CGROUP
CONFIG_NET_CLS_CGROUP
@@ -61,7 +61,7 @@ Security discussion
--------------------
This alone is not a satisfactory way to prevent misbehaving programs
to contact destinations you don't want them to. While the restrictions
-also apply to the children of the launched progorams, at a minimum, file
+also apply to the children of the launched programs, at a minimum, file
system isolation is also necessary and perhaps IPC etc.
qsni however does not aim to be a complete "jailing/isolation" solution.