diff options
| author |  rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-07-28 09:03:17 +0200 |
|---|---|---|
| committer | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-07-28 09:03:17 +0200 |
| commit | 9ca0d7a75756e786db4777f27ef7395a92d74700 (patch) | |
| tree | 2aff743fa2821fd5270dbed0da1f5e4b4386ba77 /etc/profile-a-l/chromium-common-hardened.inc.profile | |
| parent | Merge pull request #4410 from kmk3/revert-allow-deny-etc (diff) | |
| download | firejail-9ca0d7a75756e786db4777f27ef7395a92d74700.tar.gz firejail-9ca0d7a75756e786db4777f27ef7395a92d74700.tar.zst firejail-9ca0d7a75756e786db4777f27ef7395a92d74700.zip | |
kcmp is allowed by default, no need to add seccomp exceptions for it anylonger
Diffstat (limited to 'etc/profile-a-l/chromium-common-hardened.inc.profile')
| -rw-r--r-- | etc/profile-a-l/chromium-common-hardened.inc.profile | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/profile-a-l/chromium-common-hardened.inc.profile b/etc/profile-a-l/chromium-common-hardened.inc.profile index 87a0a0994..19addd285 100644 --- a/etc/profile-a-l/chromium-common-hardened.inc.profile +++ b/etc/profile-a-l/chromium-common-hardened.inc.profile | |||
| @@ -6,5 +6,4 @@ caps.drop all | |||
| 6 | nonewprivs | 6 | nonewprivs |
| 7 | noroot | 7 | noroot |
| 8 | protocol unix,inet,inet6,netlink | 8 | protocol unix,inet,inet6,netlink |
| 9 | # kcmp is required for ozone-platform=wayland, see #3783. | 9 | seccomp !chroot |
| 10 | seccomp !chroot,!kcmp | ||