aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2016-09-25 08:50:52 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2016-09-25 08:50:52 -0400
commit22978acc56b928faef08a59733c1ae4b61b5d623 (patch)
tree8b02e9f3f2ac5ecac2a492a22467f7580d2e8732
parent--allusers (diff)
parentMerge pull request #809 from graywolf/patch-1 (diff)
downloadfirejail-22978acc56b928faef08a59733c1ae4b61b5d623.tar.gz
firejail-22978acc56b928faef08a59733c1ae4b61b5d623.tar.zst
firejail-22978acc56b928faef08a59733c1ae4b61b5d623.zip
Merge branch 'master' of https://github.com/netblue30/firejail
-rw-r--r--etc/evince.profile5
-rw-r--r--src/firejail/restrict_users.c2
2 files changed, 4 insertions, 3 deletions
diff --git a/etc/evince.profile b/etc/evince.profile
index 530ce959a..374fa4aaa 100644
--- a/etc/evince.profile
+++ b/etc/evince.profile
@@ -5,14 +5,15 @@ include /etc/firejail/disable-devel.inc
5include /etc/firejail/disable-passwdmgr.inc 5include /etc/firejail/disable-passwdmgr.inc
6 6
7caps.drop all 7caps.drop all
8nonewprivs
9nogroups 8nogroups
9nonewprivs
10noroot 10noroot
11nosound 11nosound
12protocol unix 12protocol unix
13seccomp 13seccomp
14
15shell none 14shell none
15tracelog
16
16private-bin evince,evince-previewer,evince-thumbnailer 17private-bin evince,evince-previewer,evince-thumbnailer
17whitelist /tmp/.X11-unix 18whitelist /tmp/.X11-unix
18private-dev 19private-dev
diff --git a/src/firejail/restrict_users.c b/src/firejail/restrict_users.c
index 9e0c789aa..5ef9524d7 100644
--- a/src/firejail/restrict_users.c
+++ b/src/firejail/restrict_users.c
@@ -345,7 +345,7 @@ void restrict_users(void) {
345 sanitize_home(); 345 sanitize_home();
346 } 346 }
347 else { 347 else {
348 // user has the home diercotry outside /home 348 // user has the home directory outside /home
349 // mount tmpfs on top of /home in order to hide it 349 // mount tmpfs on top of /home in order to hide it
350 if (mount("tmpfs", "/home", "tmpfs", MS_NOSUID | MS_NODEV | MS_STRICTATIME | MS_REC, "mode=755,gid=0") < 0) 350 if (mount("tmpfs", "/home", "tmpfs", MS_NOSUID | MS_NODEV | MS_STRICTATIME | MS_REC, "mode=755,gid=0") < 0)
351 errExit("mount tmpfs"); 351 errExit("mount tmpfs");