diff --git a/man/systemd-nspawn.xml b/man/systemd-nspawn.xml index 1948b0a802..755246f12d 100644 --- a/man/systemd-nspawn.xml +++ b/man/systemd-nspawn.xml @@ -722,8 +722,8 @@ Alter the system call filter applied to containers. Takes a space-separated list of system call names or group names (the latter prefixed with @, as listed by the - syscall-filter command of systemd-analyze1). Passed + syscall-filter command of + systemd-analyze1). Passed system calls will be permitted. The list may optionally be prefixed by ~, in which case all listed system calls are prohibited. If this command line option is used multiple times the configured lists are combined. If both a positive and a negative list (that is one system call list without and one with the