aboutsummaryrefslogtreecommitdiffstats
path: root/etc/firefox-common.profile
diff options
context:
space:
mode:
authorLibravatar smitsohu <smitsohu@gmail.com>2018-04-09 17:04:05 +0200
committerLibravatar smitsohu <smitsohu@gmail.com>2018-04-09 17:04:05 +0200
commitd555463c624081d94b27abf67aa8b739fddf2162 (patch)
tree8bfd935078d51914115877890308ba29eecc9f83 /etc/firefox-common.profile
parentnoroot uid/gid/supplementary group fixes; problems found by smitsohu (diff)
downloadfirejail-d555463c624081d94b27abf67aa8b739fddf2162.tar.gz
firejail-d555463c624081d94b27abf67aa8b739fddf2162.tar.zst
firejail-d555463c624081d94b27abf67aa8b739fddf2162.zip
add back shell=none to firefox-common
Diffstat (limited to 'etc/firefox-common.profile')
-rw-r--r--etc/firefox-common.profile3
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/firefox-common.profile b/etc/firefox-common.profile
index 843f41fee..9ebcdba6c 100644
--- a/etc/firefox-common.profile
+++ b/etc/firefox-common.profile
@@ -34,8 +34,7 @@ noroot
34notv 34notv
35protocol unix,inet,inet6,netlink 35protocol unix,inet,inet6,netlink
36seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice 36seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
37# shell none breaks firefox>=60, see issue #1765 37shell none
38# shell none
39tracelog 38tracelog
40 39
41disable-mnt 40disable-mnt