diff options
| author |  Tad <tad@spotco.us> | 2017-08-13 15:49:50 -0400 |
|---|---|---|
| committer | Tad <tad@spotco.us> | 2017-08-13 15:53:04 -0400 |
| commit | 104dde49c0744b73ce795b9a4086607232a18305 (patch) | |
| tree | 1b67dd83bb2bf6a8a208f485e9cc39061bde74bf /etc/Xvfb.profile | |
| parent | Fix copy-paste (diff) | |
| download | firejail-104dde49c0744b73ce795b9a4086607232a18305.tar.gz firejail-104dde49c0744b73ce795b9a4086607232a18305.tar.zst firejail-104dde49c0744b73ce795b9a4086607232a18305.zip | |
Fix nodvd placement
Diffstat (limited to 'etc/Xvfb.profile')
| -rw-r--r-- | etc/Xvfb.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/Xvfb.profile b/etc/Xvfb.profile index 69420c3a8..7921e0d06 100644 --- a/etc/Xvfb.profile +++ b/etc/Xvfb.profile | |||
| @@ -23,6 +23,7 @@ include /etc/firejail/whitelist-common.inc | |||
| 23 | 23 | ||
| 24 | caps.drop all | 24 | caps.drop all |
| 25 | # Xvfb needs to be allowed access to the abstract Unix socket namespace. | 25 | # Xvfb needs to be allowed access to the abstract Unix socket namespace. |
| 26 | nodvd | ||
| 26 | nogroups | 27 | nogroups |
| 27 | nonewprivs | 28 | nonewprivs |
| 28 | # In noroot mode, Xvfb cannot create a socket in the real /tmp/.X11-unix. | 29 | # In noroot mode, Xvfb cannot create a socket in the real /tmp/.X11-unix. |
| @@ -40,4 +41,3 @@ private | |||
| 40 | private-dev | 41 | private-dev |
| 41 | private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname | 42 | private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname |
| 42 | private-tmp | 43 | private-tmp |
| 43 | nodvd | ||