diff options
author | Vincent43 <31109921+Vincent43@users.noreply.github.com> | 2018-08-15 14:03:22 +0200 |
---|---|---|
committer | Vincent43 <31109921+Vincent43@users.noreply.github.com> | 2018-08-15 14:03:22 +0200 |
commit | 2833b9f964c17e97e8524049a838e38debb3d499 (patch) | |
tree | cc81f6d8e76e9f49a3a8195ed313b1267c64f1f5 /etc | |
parent | apparmor: cleanup duplicate rules (diff) | |
download | firejail-2833b9f964c17e97e8524049a838e38debb3d499.tar.gz firejail-2833b9f964c17e97e8524049a838e38debb3d499.tar.zst firejail-2833b9f964c17e97e8524049a838e38debb3d499.zip |
wireshark.profile: enable apparmor
Diffstat (limited to 'etc')
-rw-r--r-- | etc/firejail-default | 2 | ||||
-rw-r--r-- | etc/wireshark.profile | 1 |
2 files changed, 3 insertions, 0 deletions
diff --git a/etc/firejail-default b/etc/firejail-default index 89190c826..09dc896e6 100644 --- a/etc/firejail-default +++ b/etc/firejail-default | |||
@@ -127,6 +127,8 @@ network inet6, | |||
127 | network unix, | 127 | network unix, |
128 | network netlink, | 128 | network netlink, |
129 | network raw, | 129 | network raw, |
130 | # needed for wireshark | ||
131 | network packet, | ||
130 | 132 | ||
131 | ########## | 133 | ########## |
132 | # There is no equivalent in Firejail for filtering signals. | 134 | # There is no equivalent in Firejail for filtering signals. |
diff --git a/etc/wireshark.profile b/etc/wireshark.profile index 71405ef71..330f0140e 100644 --- a/etc/wireshark.profile +++ b/etc/wireshark.profile | |||
@@ -25,6 +25,7 @@ include /etc/firejail/disable-xdg.inc | |||
25 | 25 | ||
26 | include /etc/firejail/whitelist-var-common.inc | 26 | include /etc/firejail/whitelist-var-common.inc |
27 | 27 | ||
28 | apparmor | ||
28 | # caps.drop all | 29 | # caps.drop all |
29 | caps.keep dac_override,net_admin,net_raw | 30 | caps.keep dac_override,net_admin,net_raw |
30 | netfilter | 31 | netfilter |