aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/chromium-common.profile
diff options
context:
space:
mode:
authorLibravatar rusty-snake <41237666+rusty-snake@users.noreply.github.com>2021-09-07 17:30:47 +0200
committerLibravatar rusty-snake <41237666+rusty-snake@users.noreply.github.com>2021-09-07 17:38:07 +0200
commit5d3e0e812bbdb45958031955bb2ed9b961e7f329 (patch)
tree07cc0a8390652dc450ea4d278cb64649e6f75983 /etc/profile-a-l/chromium-common.profile
parentBlacklist ~/.minisign in disable-common (diff)
downloadfirejail-5d3e0e812bbdb45958031955bb2ed9b961e7f329.tar.gz
firejail-5d3e0e812bbdb45958031955bb2ed9b961e7f329.tar.zst
firejail-5d3e0e812bbdb45958031955bb2ed9b961e7f329.zip
Rework pipewire/wayland
- closes #4483 -- mpv requires whitelisting /usr/share/pipewire - wruc: whitelist pipewire-?, pipewire is becoming more popular and was developed with isolation (container/sandbox) in mind. - wruc: whitelist wayland-? instead of only -0 and -1 - wusc: whitelist /usr/share/pipewire - remove these wruc/wusc lines from other profiles - firefox-common-addons: Make ignore wruc work again (#4512) - firefox: org.freedesktop.portal.Desktop should be enough
Diffstat (limited to 'etc/profile-a-l/chromium-common.profile')
-rw-r--r--etc/profile-a-l/chromium-common.profile4
1 files changed, 0 insertions, 4 deletions
diff --git a/etc/profile-a-l/chromium-common.profile b/etc/profile-a-l/chromium-common.profile
index b35b6ae80..c42243e02 100644
--- a/etc/profile-a-l/chromium-common.profile
+++ b/etc/profile-a-l/chromium-common.profile
@@ -37,10 +37,6 @@ include whitelist-var-common.inc
37# Add the next line to your chromium-common.local if your kernel allows unprivileged userns clone. 37# Add the next line to your chromium-common.local if your kernel allows unprivileged userns clone.
38#include chromium-common-hardened.inc.profile 38#include chromium-common-hardened.inc.profile
39 39
40# Add the next two lines to your chromium-common.local to allow screen sharing under wayland.
41#whitelist ${RUNUSER}/pipewire-0
42#whitelist /usr/share/pipewire/client.conf
43
44apparmor 40apparmor
45caps.keep sys_admin,sys_chroot 41caps.keep sys_admin,sys_chroot
46netfilter 42netfilter