diff options
| author |  Vincent43 <31109921+Vincent43@users.noreply.github.com> | 2019-08-13 09:28:59 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2019-08-13 09:28:59 +0000 |
| commit | d94e38a53f2cc9152ce0814af27fd9957b8e9e89 (patch) | |
| tree | e7682fba969611d31c51426b4cf59c214621ecce /etc/virtualbox.profile | |
| parent | Harden 7z.profile (diff) | |
| download | firejail-d94e38a53f2cc9152ce0814af27fd9957b8e9e89.tar.gz firejail-d94e38a53f2cc9152ce0814af27fd9957b8e9e89.tar.zst firejail-d94e38a53f2cc9152ce0814af27fd9957b8e9e89.zip | |
virtualbox: add required capabilities
VirtualBox has several setuid binaries which need cap_sys_admin, cap_net_raw and cap_sys_nice to work properly.
Fixes https://github.com/netblue30/firejail/issues/2868
Diffstat (limited to 'etc/virtualbox.profile')
| -rw-r--r-- | etc/virtualbox.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/virtualbox.profile b/etc/virtualbox.profile index 45f9949f3..ccb968697 100644 --- a/etc/virtualbox.profile +++ b/etc/virtualbox.profile | |||
| @@ -26,7 +26,7 @@ whitelist ${DOWNLOADS} | |||
| 26 | include whitelist-common.inc | 26 | include whitelist-common.inc |
| 27 | include whitelist-var-common.inc | 27 | include whitelist-var-common.inc |
| 28 | 28 | ||
| 29 | caps.drop all | 29 | caps.keep sys_admin,net_raw,sys_nice |
| 30 | netfilter | 30 | netfilter |
| 31 | nodvd | 31 | nodvd |
| 32 | notv | 32 | notv |