diff options
author | 2018-05-14 13:51:47 -0400 | |
---|---|---|
committer | 2018-05-14 13:51:47 -0400 | |
commit | 241f3b9f3cf0825d4c5883d9a04fca4ea584848d (patch) | |
tree | 2d5be02cda3ebf281e78d1ce37412c84bb949777 | |
parent | krita.profile: allow python (diff) | |
download | firejail-241f3b9f3cf0825d4c5883d9a04fca4ea584848d.tar.gz firejail-241f3b9f3cf0825d4c5883d9a04fca4ea584848d.tar.zst firejail-241f3b9f3cf0825d4c5883d9a04fca4ea584848d.zip |
expand seccomp macros in seccomp.drop line - macros not supported in 0.9.38
-rw-r--r-- | etc-fixes/0.9.38/firefox.profile | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/etc-fixes/0.9.38/firefox.profile b/etc-fixes/0.9.38/firefox.profile index c5c47d1b5..f107f77fd 100644 --- a/etc-fixes/0.9.38/firefox.profile +++ b/etc-fixes/0.9.38/firefox.profile | |||
@@ -5,7 +5,10 @@ include /etc/firejail/disable-secret.inc | |||
5 | include /etc/firejail/disable-common.inc | 5 | include /etc/firejail/disable-common.inc |
6 | include /etc/firejail/disable-devel.inc | 6 | include /etc/firejail/disable-devel.inc |
7 | caps.drop all | 7 | caps.drop all |
8 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | 8 | |
9 | #seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | ||
10 | seccomp.drop adjtimex,clock_adjtime,clock_settime,settimeofday,stime,modify_ldt,subpage_prot,switch_endian,vm86,vm86old,lookup_dcookie,perf_event_open,process_vm_writev,rtas,s390_runtime_instr,sys_debug_setcontext,delete_module,finit_module,init_module,_sysctl,afs_syscall,bdflush,break,create_module,ftime,get_kernel_syms,getpmsg,gtty,lock,mpx,prof,profil,putpmsg,query_module,security,sgetmask,ssetmask,stty,sysfs,tuxcall,ulimit,uselib,ustat,vserver,ioperm,iopl,pciconfig_iobase,pciconfig_read,pciconfig_write,s390_mmio_read,s390_mmio_write,kexec_load,kexec_file_load,reboot,set_mempolicy,migrate_pages,move_pages,mbind,swapon,swapoff,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | ||
11 | |||
9 | protocol unix,inet,inet6,netlink | 12 | protocol unix,inet,inet6,netlink |
10 | netfilter | 13 | netfilter |
11 | # tracelog | 14 | # tracelog |