diff options
| author |  netblue30 <netblue30@yahoo.com> | 2018-05-14 13:51:47 -0400 |
|---|---|---|
| committer | netblue30 <netblue30@yahoo.com> | 2018-05-14 13:51:47 -0400 |
| commit | 241f3b9f3cf0825d4c5883d9a04fca4ea584848d (patch) | |
| tree | 2d5be02cda3ebf281e78d1ce37412c84bb949777 /etc-fixes | |
| parent | krita.profile: allow python (diff) | |
| download | firejail-241f3b9f3cf0825d4c5883d9a04fca4ea584848d.tar.gz firejail-241f3b9f3cf0825d4c5883d9a04fca4ea584848d.tar.zst firejail-241f3b9f3cf0825d4c5883d9a04fca4ea584848d.zip | |
expand seccomp macros in seccomp.drop line - macros not supported in 0.9.38
Diffstat (limited to 'etc-fixes')
| -rw-r--r-- | etc-fixes/0.9.38/firefox.profile | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/etc-fixes/0.9.38/firefox.profile b/etc-fixes/0.9.38/firefox.profile index c5c47d1b5..f107f77fd 100644 --- a/etc-fixes/0.9.38/firefox.profile +++ b/etc-fixes/0.9.38/firefox.profile | |||
| @@ -5,7 +5,10 @@ include /etc/firejail/disable-secret.inc | |||
| 5 | include /etc/firejail/disable-common.inc | 5 | include /etc/firejail/disable-common.inc |
| 6 | include /etc/firejail/disable-devel.inc | 6 | include /etc/firejail/disable-devel.inc |
| 7 | caps.drop all | 7 | caps.drop all |
| 8 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | 8 | |
| 9 | #seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | ||
| 10 | seccomp.drop adjtimex,clock_adjtime,clock_settime,settimeofday,stime,modify_ldt,subpage_prot,switch_endian,vm86,vm86old,lookup_dcookie,perf_event_open,process_vm_writev,rtas,s390_runtime_instr,sys_debug_setcontext,delete_module,finit_module,init_module,_sysctl,afs_syscall,bdflush,break,create_module,ftime,get_kernel_syms,getpmsg,gtty,lock,mpx,prof,profil,putpmsg,query_module,security,sgetmask,ssetmask,stty,sysfs,tuxcall,ulimit,uselib,ustat,vserver,ioperm,iopl,pciconfig_iobase,pciconfig_read,pciconfig_write,s390_mmio_read,s390_mmio_write,kexec_load,kexec_file_load,reboot,set_mempolicy,migrate_pages,move_pages,mbind,swapon,swapoff,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | ||
| 11 | |||
| 9 | protocol unix,inet,inet6,netlink | 12 | protocol unix,inet,inet6,netlink |
| 10 | netfilter | 13 | netfilter |
| 11 | # tracelog | 14 | # tracelog |