diff options
author | 2021-07-28 09:03:17 +0200 | |
---|---|---|
committer | 2021-07-28 09:03:17 +0200 | |
commit | 9ca0d7a75756e786db4777f27ef7395a92d74700 (patch) | |
tree | 2aff743fa2821fd5270dbed0da1f5e4b4386ba77 | |
parent | Merge pull request #4410 from kmk3/revert-allow-deny-etc (diff) | |
download | firejail-9ca0d7a75756e786db4777f27ef7395a92d74700.tar.gz firejail-9ca0d7a75756e786db4777f27ef7395a92d74700.tar.zst firejail-9ca0d7a75756e786db4777f27ef7395a92d74700.zip |
kcmp is allowed by default, no need to add seccomp exceptions for it anylonger
-rw-r--r-- | etc/profile-a-l/chromium-common-hardened.inc.profile | 3 | ||||
-rw-r--r-- | etc/profile-m-z/minitube.profile | 2 |
2 files changed, 2 insertions, 3 deletions
diff --git a/etc/profile-a-l/chromium-common-hardened.inc.profile b/etc/profile-a-l/chromium-common-hardened.inc.profile index 87a0a0994..19addd285 100644 --- a/etc/profile-a-l/chromium-common-hardened.inc.profile +++ b/etc/profile-a-l/chromium-common-hardened.inc.profile | |||
@@ -6,5 +6,4 @@ caps.drop all | |||
6 | nonewprivs | 6 | nonewprivs |
7 | noroot | 7 | noroot |
8 | protocol unix,inet,inet6,netlink | 8 | protocol unix,inet,inet6,netlink |
9 | # kcmp is required for ozone-platform=wayland, see #3783. | 9 | seccomp !chroot |
10 | seccomp !chroot,!kcmp | ||
diff --git a/etc/profile-m-z/minitube.profile b/etc/profile-m-z/minitube.profile index 3fe3428d0..b8a551b6c 100644 --- a/etc/profile-m-z/minitube.profile +++ b/etc/profile-m-z/minitube.profile | |||
@@ -47,7 +47,7 @@ notv | |||
47 | nou2f | 47 | nou2f |
48 | novideo | 48 | novideo |
49 | protocol unix,inet,inet6,netlink | 49 | protocol unix,inet,inet6,netlink |
50 | seccomp !kcmp | 50 | seccomp |
51 | shell none | 51 | shell none |
52 | tracelog | 52 | tracelog |
53 | 53 | ||