diff options
| author |  netblue30 <netblue30@yahoo.com> | 2019-01-23 11:48:39 -0500 |
|---|---|---|
| committer | netblue30 <netblue30@yahoo.com> | 2019-01-23 11:48:39 -0500 |
| commit | d69d2968066b8be3434864c7bbe7d6ead6ae41d3 (patch) | |
| tree | 2a7cc6478dbb654384569b9571008ccd197aaa53 /etc/clementine.profile | |
| parent | improve gwenview and dolphin profiles - #2306 #2348 (diff) | |
| download | firejail-d69d2968066b8be3434864c7bbe7d6ead6ae41d3.tar.gz firejail-d69d2968066b8be3434864c7bbe7d6ead6ae41d3.tar.zst firejail-d69d2968066b8be3434864c7bbe7d6ead6ae41d3.zip | |
removed mincore syscall from default seccomp filter
Diffstat (limited to 'etc/clementine.profile')
| -rw-r--r-- | etc/clementine.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/clementine.profile b/etc/clementine.profile index 1cf478ead..147b0de4b 100644 --- a/etc/clementine.profile +++ b/etc/clementine.profile | |||
| @@ -27,7 +27,7 @@ nou2f | |||
| 27 | novideo | 27 | novideo |
| 28 | protocol unix,inet,inet6 | 28 | protocol unix,inet,inet6 |
| 29 | # blacklisting of ioprio_set system calls breaks clementine | 29 | # blacklisting of ioprio_set system calls breaks clementine |
| 30 | seccomp.drop mincore,@cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice | 30 | seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice |
| 31 | 31 | ||
| 32 | private-dev | 32 | private-dev |
| 33 | private-tmp | 33 | private-tmp |