disable chroot by default in /etc/firejail/firejail.config

2 files changed, 3 insertions, 2 deletions

diff --git a/etc/firejail.config b/etc/firejail.config
index 3c1cb7336..7dd5fa3db 100644
--- a/etc/firejail.config
+++ b/etc/firejail.config
@@ -25,8 +25,8 @@
 # Disable U2F in browsers, default enabled.
 # browser-disable-u2f yes
 
-# Enable or disable chroot support, default enabled.
-# chroot yes
+# Enable or disable chroot support, default disabled
+# chroot no
 
 # Enable or disable dbus handling, default enabled.
 # dbus yes
diff --git a/src/firejail/checkcfg.c b/src/firejail/checkcfg.c
index 33260ce94..166f2945a 100644
--- a/src/firejail/checkcfg.c
+++ b/src/firejail/checkcfg.c
@@ -59,6 +59,7 @@ int checkcfg(int val) {
                 cfg_val[CFG_SECCOMP_ERROR_ACTION] = -1;
                 cfg_val[CFG_BROWSER_ALLOW_DRM] = 0;
                 cfg_val[CFG_ALLOW_TRAY] = 0;
+                cfg_val[CFG_CHROOT] = 0;
 
                 // open configuration file
                 const char *fname = SYSCONFDIR "/firejail.config";