diff options
author | Tad <tad@spotco.us> | 2018-08-08 19:49:32 -0400 |
---|---|---|
committer | Tad <tad@spotco.us> | 2018-08-08 19:49:32 -0400 |
commit | 898387577f68ec9b69ae0e5f4d13409ed53a1fdf (patch) | |
tree | a9752288a87afb7c734966b9336b958e0a99da14 /etc/ping.profile | |
parent | Merges (diff) | |
download | firejail-898387577f68ec9b69ae0e5f4d13409ed53a1fdf.tar.gz firejail-898387577f68ec9b69ae0e5f4d13409ed53a1fdf.tar.zst firejail-898387577f68ec9b69ae0e5f4d13409ed53a1fdf.zip |
Stop breaking PKI with private-etc
Command: grep "crypto-policies" -iL $(grep "private-etc" -il $(grep "inet,inet6" . -Rl))
+ fixes for #2077
Diffstat (limited to 'etc/ping.profile')
-rw-r--r-- | etc/ping.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/ping.profile b/etc/ping.profile index db5390a41..2b20bf8c9 100644 --- a/etc/ping.profile +++ b/etc/ping.profile | |||
@@ -40,7 +40,7 @@ private | |||
40 | #private-bin has mammoth problems with execvp: "No such file or directory" | 40 | #private-bin has mammoth problems with execvp: "No such file or directory" |
41 | private-dev | 41 | private-dev |
42 | # /etc/hosts is required in private-etc; however, just adding it to the list doesn't solve the problem! | 42 | # /etc/hosts is required in private-etc; however, just adding it to the list doesn't solve the problem! |
43 | #private-etc resolv.conf,hosts | 43 | #private-etc resolv.conf,hosts,ca-certificates,ssl,pki,crypto-policies |
44 | private-tmp | 44 | private-tmp |
45 | 45 | ||
46 | # memory-deny-write-execute is built using seccomp; nonewprivs will kill it | 46 | # memory-deny-write-execute is built using seccomp; nonewprivs will kill it |