diff options
| author |  Fred Barclay <Fred-Barclay@users.noreply.github.com> | 2017-08-13 15:07:29 -0500 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2017-08-13 15:07:29 -0500 |
| commit | ea8312bf0a5a334cba9d332dc0f0cce3b967d12d (patch) | |
| tree | 7110249a1cbf5dceb263d7e93ae635817ce7fe59 /etc/Xvfb.profile | |
| parent | Merge pull request #1444 from SpotComms/h2 (diff) | |
| parent | Fix nodvd placement (diff) | |
| download | firejail-ea8312bf0a5a334cba9d332dc0f0cce3b967d12d.tar.gz firejail-ea8312bf0a5a334cba9d332dc0f0cce3b967d12d.tar.zst firejail-ea8312bf0a5a334cba9d332dc0f0cce3b967d12d.zip | |
Merge pull request #1466 from SpotComms/fixnd
Fix nodvd placement
Diffstat (limited to 'etc/Xvfb.profile')
| -rw-r--r-- | etc/Xvfb.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/Xvfb.profile b/etc/Xvfb.profile index 69420c3a8..7921e0d06 100644 --- a/etc/Xvfb.profile +++ b/etc/Xvfb.profile | |||
| @@ -23,6 +23,7 @@ include /etc/firejail/whitelist-common.inc | |||
| 23 | 23 | ||
| 24 | caps.drop all | 24 | caps.drop all |
| 25 | # Xvfb needs to be allowed access to the abstract Unix socket namespace. | 25 | # Xvfb needs to be allowed access to the abstract Unix socket namespace. |
| 26 | nodvd | ||
| 26 | nogroups | 27 | nogroups |
| 27 | nonewprivs | 28 | nonewprivs |
| 28 | # In noroot mode, Xvfb cannot create a socket in the real /tmp/.X11-unix. | 29 | # In noroot mode, Xvfb cannot create a socket in the real /tmp/.X11-unix. |
| @@ -40,4 +41,3 @@ private | |||
| 40 | private-dev | 41 | private-dev |
| 41 | private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname | 42 | private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname |
| 42 | private-tmp | 43 | private-tmp |
| 43 | nodvd | ||