diff options
author | curiosityseeker <60518106+curiosityseeker@users.noreply.github.com> | 2020-06-01 13:42:53 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-06-01 13:42:53 +0200 |
commit | 6a289235cd1d8b28866bcfaf33205d4f6286e512 (patch) | |
tree | 1c224c6f3b7faf26254b40df6c804a61c7a488c3 | |
parent | harden mpg123.profile (#3438) (diff) | |
download | firejail-6a289235cd1d8b28866bcfaf33205d4f6286e512.tar.gz firejail-6a289235cd1d8b28866bcfaf33205d4f6286e512.tar.zst firejail-6a289235cd1d8b28866bcfaf33205d4f6286e512.zip |
Avoid dbus-*=filter breakage (#3432)
-rw-r--r-- | etc/apparmor/firejail-default | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/apparmor/firejail-default b/etc/apparmor/firejail-default index e68e51c63..fc6690752 100644 --- a/etc/apparmor/firejail-default +++ b/etc/apparmor/firejail-default | |||
@@ -19,6 +19,8 @@ profile firejail-default flags=(attach_disconnected,mediate_deleted) { | |||
19 | #include <abstractions/dbus-strict> | 19 | #include <abstractions/dbus-strict> |
20 | #include <abstractions/dbus-session-strict> | 20 | #include <abstractions/dbus-session-strict> |
21 | dbus, | 21 | dbus, |
22 | # Add rule in order to avoid dbus-*=filter breakage (#3432) | ||
23 | owner /{,var/}run/firejail/dbus/[0-9]*/[0-9]*-user w, | ||
22 | 24 | ||
23 | ########## | 25 | ########## |
24 | # With ptrace it is possible to inspect and hijack running programs. | 26 | # With ptrace it is possible to inspect and hijack running programs. |