summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar startx2017 <vradu.startx@yandex.com>2018-05-14 09:34:52 -0400
committerLibravatar startx2017 <vradu.startx@yandex.com>2018-05-14 09:34:52 -0400
commit44f6a69584d2bfee93a58c6af09aab473c28c72a (patch)
tree1ccef16cf0d2ca4a8a218cf6ca5eeb9b858804a4
parentremove unused files (diff)
parentskanlite.profile: Allow access to scanner through network (diff)
downloadfirejail-44f6a69584d2bfee93a58c6af09aab473c28c72a.tar.gz
firejail-44f6a69584d2bfee93a58c6af09aab473c28c72a.tar.zst
firejail-44f6a69584d2bfee93a58c6af09aab473c28c72a.zip
Merge branch 'master' of https://github.com/netblue30/firejail
-rw-r--r--etc/skanlite.profile2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/skanlite.profile b/etc/skanlite.profile
index 0eb70e698..ee027bf51 100644
--- a/etc/skanlite.profile
+++ b/etc/skanlite.profile
@@ -22,7 +22,7 @@ noroot
22nosound 22nosound
23notv 23notv
24# novideo 24# novideo
25protocol unix,netlink 25protocol unix,inet,inet6,netlink
26# blacklisting of ioperm system calls breaks skanlite 26# blacklisting of ioperm system calls breaks skanlite
27seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice 27seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
28shell none 28shell none