diff options
author | 2021-07-28 09:03:17 +0200 | |
---|---|---|
committer | 2021-07-28 09:03:17 +0200 | |
commit | 9ca0d7a75756e786db4777f27ef7395a92d74700 (patch) | |
tree | 2aff743fa2821fd5270dbed0da1f5e4b4386ba77 /etc/profile-a-l | |
parent | Merge pull request #4410 from kmk3/revert-allow-deny-etc (diff) | |
download | firejail-9ca0d7a75756e786db4777f27ef7395a92d74700.tar.gz firejail-9ca0d7a75756e786db4777f27ef7395a92d74700.tar.zst firejail-9ca0d7a75756e786db4777f27ef7395a92d74700.zip |
kcmp is allowed by default, no need to add seccomp exceptions for it anylonger
Diffstat (limited to 'etc/profile-a-l')
-rw-r--r-- | etc/profile-a-l/chromium-common-hardened.inc.profile | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/profile-a-l/chromium-common-hardened.inc.profile b/etc/profile-a-l/chromium-common-hardened.inc.profile index 87a0a0994..19addd285 100644 --- a/etc/profile-a-l/chromium-common-hardened.inc.profile +++ b/etc/profile-a-l/chromium-common-hardened.inc.profile | |||
@@ -6,5 +6,4 @@ caps.drop all | |||
6 | nonewprivs | 6 | nonewprivs |
7 | noroot | 7 | noroot |
8 | protocol unix,inet,inet6,netlink | 8 | protocol unix,inet,inet6,netlink |
9 | # kcmp is required for ozone-platform=wayland, see #3783. | 9 | seccomp !chroot |
10 | seccomp !chroot,!kcmp | ||