diff options
| author |  rusty-snake <print_hello_world+Public@protonmail.com> | 2019-07-17 19:05:40 +0200 |
|---|---|---|
| committer | rusty-snake <print_hello_world+Public@protonmail.com> | 2019-07-18 09:36:20 +0200 |
| commit | 26aa2f91f92c5cc50136c04293c834f2f6a5bacd (patch) | |
| tree | 181069b72f38f981ba208b5f017158863b998967 | |
| parent | Harden gnome-schedule (diff) | |
| download | firejail-26aa2f91f92c5cc50136c04293c834f2f6a5bacd.tar.gz firejail-26aa2f91f92c5cc50136c04293c834f2f6a5bacd.tar.zst firejail-26aa2f91f92c5cc50136c04293c834f2f6a5bacd.zip | |
use allow-debuggers in spectre-meltdown-checker
| -rw-r--r-- | etc/spectre-meltdown-checker.profile | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/spectre-meltdown-checker.profile b/etc/spectre-meltdown-checker.profile index ca2c2b435..cb4a74e11 100644 --- a/etc/spectre-meltdown-checker.profile +++ b/etc/spectre-meltdown-checker.profile | |||
| @@ -6,8 +6,6 @@ include spectre-meltdown-checker.local | |||
| 6 | # Persistent global definitions | 6 | # Persistent global definitions |
| 7 | include globals.local | 7 | include globals.local |
| 8 | 8 | ||
| 9 | # sudo firejail --allow-debuggers spectre-meltdown-checker | ||
| 10 | |||
| 11 | noblacklist ${PATH}/mount | 9 | noblacklist ${PATH}/mount |
| 12 | noblacklist ${PATH}/umount | 10 | noblacklist ${PATH}/umount |
| 13 | 11 | ||
| @@ -24,6 +22,7 @@ include disable-xdg.inc | |||
| 24 | 22 | ||
| 25 | include whitelist-var-common.inc | 23 | include whitelist-var-common.inc |
| 26 | 24 | ||
| 25 | allow-debuggers | ||
| 27 | caps.keep sys_rawio | 26 | caps.keep sys_rawio |
| 28 | ipc-namespace | 27 | ipc-namespace |
| 29 | net none | 28 | net none |