diff options
author | netblue30 <netblue30@yahoo.com> | 2019-01-14 09:44:53 -0500 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2019-01-14 09:44:53 -0500 |
commit | ae3db84128503c16fd638b5c7bf9408d64ce14ba (patch) | |
tree | c9767454fa6a0555f3bd9784e6d5d7b7433b932e /etc/firefox-common.profile | |
parent | fix error message (diff) | |
download | firejail-ae3db84128503c16fd638b5c7bf9408d64ce14ba.tar.gz firejail-ae3db84128503c16fd638b5c7bf9408d64ce14ba.tar.zst firejail-ae3db84128503c16fd638b5c7bf9408d64ce14ba.zip |
adding mincore syscall to the default seccomp filter and some independent profiles
Diffstat (limited to 'etc/firefox-common.profile')
-rw-r--r-- | etc/firefox-common.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/firefox-common.profile b/etc/firefox-common.profile index ad8a0a0b7..288afa8a2 100644 --- a/etc/firefox-common.profile +++ b/etc/firefox-common.profile | |||
@@ -40,7 +40,7 @@ noroot | |||
40 | notv | 40 | notv |
41 | ?BROWSER_DISABLE_U2F: nou2f | 41 | ?BROWSER_DISABLE_U2F: nou2f |
42 | protocol unix,inet,inet6,netlink | 42 | protocol unix,inet,inet6,netlink |
43 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | 43 | seccomp.drop mincore,@clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice |
44 | shell none | 44 | shell none |
45 | #disable tracelog, it breaks or causes major issues with many firefox based browsers, see github issue #1930 | 45 | #disable tracelog, it breaks or causes major issues with many firefox based browsers, see github issue #1930 |
46 | #tracelog | 46 | #tracelog |