diff options
author | smitsohu <smitsohu@gmail.com> | 2022-03-12 14:02:47 +0100 |
---|---|---|
committer | smitsohu <smitsohu@gmail.com> | 2022-03-12 14:02:47 +0100 |
commit | 1aa27cd7f42153d86fc14116a2a07e4206fbea39 (patch) | |
tree | a8109b703f5e646e9db69f961fcfda2ecbd6d215 | |
parent | fbuilder tweaks (diff) | |
download | firejail-1aa27cd7f42153d86fc14116a2a07e4206fbea39.tar.gz firejail-1aa27cd7f42153d86fc14116a2a07e4206fbea39.tar.zst firejail-1aa27cd7f42153d86fc14116a2a07e4206fbea39.zip |
fbuilder: fix Electron apps
tracelog is known to be incompatible with Chromium/Electron apps
keep it commented for the time being
-rw-r--r-- | src/fbuilder/build_profile.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/fbuilder/build_profile.c b/src/fbuilder/build_profile.c index f3115646a..4fcd950c6 100644 --- a/src/fbuilder/build_profile.c +++ b/src/fbuilder/build_profile.c | |||
@@ -143,7 +143,7 @@ void build_profile(int argc, char **argv, int index, FILE *fp) { | |||
143 | build_protocol(trace_output, fp); | 143 | build_protocol(trace_output, fp); |
144 | fprintf(fp, "seccomp !chroot\t# allowing chroot, just in case this is an Electron app\n"); | 144 | fprintf(fp, "seccomp !chroot\t# allowing chroot, just in case this is an Electron app\n"); |
145 | fprintf(fp, "shell none\n"); | 145 | fprintf(fp, "shell none\n"); |
146 | fprintf(fp, "tracelog\n"); | 146 | fprintf(fp, "#tracelog\t# send blacklist violations to syslog\n"); |
147 | fprintf(fp, "\n"); | 147 | fprintf(fp, "\n"); |
148 | 148 | ||
149 | fprintf(fp, "#disable-mnt\t# no access to /mnt, /media, /run/mount and /run/media\n"); | 149 | fprintf(fp, "#disable-mnt\t# no access to /mnt, /media, /run/mount and /run/media\n"); |