diff options
author | smitsohu <smitsohu@gmail.com> | 2017-12-08 01:14:14 +0100 |
---|---|---|
committer | smitsohu <smitsohu@gmail.com> | 2017-12-08 01:14:14 +0100 |
commit | b19757e2e50b5800b203e15eca58559282e254b4 (patch) | |
tree | 1a8c808b035980b67ac85faafc4e367dd2cb63d7 /etc | |
parent | fix sound in firefox started from thunderbird (diff) | |
download | firejail-b19757e2e50b5800b203e15eca58559282e254b4.tar.gz firejail-b19757e2e50b5800b203e15eca58559282e254b4.tar.zst firejail-b19757e2e50b5800b203e15eca58559282e254b4.zip |
pedantic comment fix
Diffstat (limited to 'etc')
-rw-r--r-- | etc/baloo_file.profile | 2 | ||||
-rw-r--r-- | etc/clementine.profile | 2 | ||||
-rw-r--r-- | etc/simple-scan.profile | 2 | ||||
-rw-r--r-- | etc/skanlite.profile | 2 |
4 files changed, 4 insertions, 4 deletions
diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile index f6dbb480b..e265bcd82 100644 --- a/etc/baloo_file.profile +++ b/etc/baloo_file.profile | |||
@@ -29,7 +29,7 @@ nosound | |||
29 | notv | 29 | notv |
30 | novideo | 30 | novideo |
31 | protocol unix | 31 | protocol unix |
32 | # Baloo makes ioprio_set system calls, which are blacklisted by default. | 32 | # blacklisting of ioprio_set system calls breaks baloo_file |
33 | seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice | 33 | seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice |
34 | shell none | 34 | shell none |
35 | # x11 xorg | 35 | # x11 xorg |
diff --git a/etc/clementine.profile b/etc/clementine.profile index f4a3301b6..a736f7bf9 100644 --- a/etc/clementine.profile +++ b/etc/clementine.profile | |||
@@ -20,7 +20,7 @@ noroot | |||
20 | notv | 20 | notv |
21 | novideo | 21 | novideo |
22 | protocol unix,inet,inet6 | 22 | protocol unix,inet,inet6 |
23 | # Clementine makes ioprio_set system calls, which are blacklisted by default. | 23 | # blacklisting of ioprio_set system calls breaks clementine |
24 | seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice | 24 | seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice |
25 | 25 | ||
26 | private-dev | 26 | private-dev |
diff --git a/etc/simple-scan.profile b/etc/simple-scan.profile index b7dc3c57c..a205024cc 100644 --- a/etc/simple-scan.profile +++ b/etc/simple-scan.profile | |||
@@ -22,7 +22,7 @@ nosound | |||
22 | notv | 22 | notv |
23 | # novideo | 23 | # novideo |
24 | protocol unix,inet,inet6,netlink | 24 | protocol unix,inet,inet6,netlink |
25 | # simple-scan makes ioperm system calls, which are blacklisted by default. | 25 | # blacklisting of ioperm system calls breaks simple-scan |
26 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | 26 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice |
27 | shell none | 27 | shell none |
28 | tracelog | 28 | tracelog |
diff --git a/etc/skanlite.profile b/etc/skanlite.profile index f1a64093a..a9a8fdad6 100644 --- a/etc/skanlite.profile +++ b/etc/skanlite.profile | |||
@@ -23,7 +23,7 @@ nosound | |||
23 | notv | 23 | notv |
24 | # novideo | 24 | # novideo |
25 | protocol unix,netlink | 25 | protocol unix,netlink |
26 | # skanlite makes ioperm system calls, which are blacklisted by default. | 26 | # blacklisting of ioperm system calls breaks skanlite |
27 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | 27 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice |
28 | shell none | 28 | shell none |
29 | 29 | ||