diff options
| author |  curiosityseeker <60518106+curiosityseeker@users.noreply.github.com> | 2020-06-01 13:42:53 +0200 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2020-06-01 13:42:53 +0200 |
| commit | 6a289235cd1d8b28866bcfaf33205d4f6286e512 (patch) | |
| tree | 1c224c6f3b7faf26254b40df6c804a61c7a488c3 /etc/apparmor | |
| parent | harden mpg123.profile (#3438) (diff) | |
| download | firejail-6a289235cd1d8b28866bcfaf33205d4f6286e512.tar.gz firejail-6a289235cd1d8b28866bcfaf33205d4f6286e512.tar.zst firejail-6a289235cd1d8b28866bcfaf33205d4f6286e512.zip | |
Avoid dbus-*=filter breakage (#3432)
Diffstat (limited to 'etc/apparmor')
| -rw-r--r-- | etc/apparmor/firejail-default | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/apparmor/firejail-default b/etc/apparmor/firejail-default index e68e51c63..fc6690752 100644 --- a/etc/apparmor/firejail-default +++ b/etc/apparmor/firejail-default | |||
| @@ -19,6 +19,8 @@ profile firejail-default flags=(attach_disconnected,mediate_deleted) { | |||
| 19 | #include <abstractions/dbus-strict> | 19 | #include <abstractions/dbus-strict> |
| 20 | #include <abstractions/dbus-session-strict> | 20 | #include <abstractions/dbus-session-strict> |
| 21 | dbus, | 21 | dbus, |
| 22 | # Add rule in order to avoid dbus-*=filter breakage (#3432) | ||
| 23 | owner /{,var/}run/firejail/dbus/[0-9]*/[0-9]*-user w, | ||
| 22 | 24 | ||
| 23 | ########## | 25 | ########## |
| 24 | # With ptrace it is possible to inspect and hijack running programs. | 26 | # With ptrace it is possible to inspect and hijack running programs. |