aboutsummaryrefslogtreecommitdiffstats
path: root/etc/skanlite.profile
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2019-09-15 06:59:31 -0500
committerLibravatar GitHub <noreply@github.com>2019-09-15 06:59:31 -0500
commit99da7745bfd2a7c3a8c982e15b7d9b38e4df9b4b (patch)
treeaab0f8277a0ae1de922b8a9268b01428e8febd73 /etc/skanlite.profile
parentMake sure that we are unprivileged before creating the trace log file. (diff)
parentFix #2899 (diff)
downloadfirejail-99da7745bfd2a7c3a8c982e15b7d9b38e4df9b4b.tar.gz
firejail-99da7745bfd2a7c3a8c982e15b7d9b38e4df9b4b.tar.zst
firejail-99da7745bfd2a7c3a8c982e15b7d9b38e4df9b4b.zip
Merge branch 'master' into fix-profile-builder
Diffstat (limited to 'etc/skanlite.profile')
-rw-r--r--etc/skanlite.profile2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/skanlite.profile b/etc/skanlite.profile
index c10be717b..6f9bfd201 100644
--- a/etc/skanlite.profile
+++ b/etc/skanlite.profile
@@ -27,7 +27,7 @@ notv
27# novideo 27# novideo
28protocol unix,inet,inet6,netlink 28protocol unix,inet,inet6,netlink
29# blacklisting of ioperm system calls breaks skanlite 29# blacklisting of ioperm system calls breaks skanlite
30seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice 30seccomp !ioperm
31shell none 31shell none
32 32
33# private-bin kbuildsycoca4,kdeinit4,skanlite 33# private-bin kbuildsycoca4,kdeinit4,skanlite