diff options
author | Vincent43 <31109921+Vincent43@users.noreply.github.com> | 2018-08-15 12:38:31 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2018-08-15 12:38:31 +0100 |
commit | 43b215ea3974244bd2fe982efe8f8d89d14f9e47 (patch) | |
tree | b960df61edc6ca62fbfe3e17b4e571bdf673dfa8 | |
parent | Merge pull request #2081 from SkewedZeppelin/descriptions (diff) | |
download | firejail-43b215ea3974244bd2fe982efe8f8d89d14f9e47.tar.gz firejail-43b215ea3974244bd2fe982efe8f8d89d14f9e47.tar.zst firejail-43b215ea3974244bd2fe982efe8f8d89d14f9e47.zip |
apparmor: allow execution from /usr/lib64
/usr/lib64 was missing from execution whitelist and it's used in openSUSE, see https://github.com/netblue30/firejail/issues/2078
-rw-r--r-- | etc/firejail-default | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/firejail-default b/etc/firejail-default index 28103a598..91a293a52 100644 --- a/etc/firejail-default +++ b/etc/firejail-default | |||
@@ -98,6 +98,7 @@ deny /**/.snapshots/ rwx, | |||
98 | /usr/sbin/** ix, | 98 | /usr/sbin/** ix, |
99 | /usr/local/** ix, | 99 | /usr/local/** ix, |
100 | /usr/lib/** ix, | 100 | /usr/lib/** ix, |
101 | /usr/lib64/** ix, | ||
101 | /usr/games/** ix, | 102 | /usr/games/** ix, |
102 | /opt/ r, | 103 | /opt/ r, |
103 | /opt/** r, | 104 | /opt/** r, |
@@ -111,6 +112,7 @@ deny /**/.snapshots/ rwx, | |||
111 | /run/firejail/mnt/oroot/usr/sbin/** ix, | 112 | /run/firejail/mnt/oroot/usr/sbin/** ix, |
112 | /run/firejail/mnt/oroot/usr/local/** ix, | 113 | /run/firejail/mnt/oroot/usr/local/** ix, |
113 | /run/firejail/mnt/oroot/usr/lib/** ix, | 114 | /run/firejail/mnt/oroot/usr/lib/** ix, |
115 | /run/firejail/mnt/oroot/usr/lib64/** ix, | ||
114 | /run/firejail/mnt/oroot/usr/games/** ix, | 116 | /run/firejail/mnt/oroot/usr/games/** ix, |
115 | /run/firejail/mnt/oroot/opt/ r, | 117 | /run/firejail/mnt/oroot/opt/ r, |
116 | /run/firejail/mnt/oroot/opt/** r, | 118 | /run/firejail/mnt/oroot/opt/** r, |