allow using wruc on any program

@glitsj16 thanks for the pointer that we now have whitelist globbing

2 files changed, 2 insertions, 0 deletions

diff --git a/RELNOTES b/RELNOTES
index b982202d6..247a3ebe6 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -4,6 +4,7 @@ firejail (0.9.63) baseline; urgency=low
   * SELinux labeling support
   * 32-bit seccomp filter
   * restrict ${RUNUSER} in serveral profiles
+  * whitelist globbing
   * new condition: HAS_NOSOUND
   * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
   * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
diff --git a/etc/whitelist-runuser-common.inc b/etc/whitelist-runuser-common.inc
index de59d03d3..9ffd3d5be 100644
--- a/etc/whitelist-runuser-common.inc
+++ b/etc/whitelist-runuser-common.inc
@@ -6,5 +6,6 @@ include whitelist-runuser-common.local
 whitelist ${RUNUSER}/bus
 whitelist ${RUNUSER}/dconf
 whitelist ${RUNUSER}/gdm/Xauthority
+whitelist ${RUNUSER}/.mutter-Xwaylandauth.*
 whitelist ${RUNUSER}/pulse/native
 whitelist ${RUNUSER}/wayland-0