diff options
| author |  Vincent43 <31109921+Vincent43@users.noreply.github.com> | 2018-08-15 12:38:31 +0100 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2018-08-15 12:38:31 +0100 |
| commit | 43b215ea3974244bd2fe982efe8f8d89d14f9e47 (patch) | |
| tree | b960df61edc6ca62fbfe3e17b4e571bdf673dfa8 /etc | |
| parent | Merge pull request #2081 from SkewedZeppelin/descriptions (diff) | |
| download | firejail-43b215ea3974244bd2fe982efe8f8d89d14f9e47.tar.gz firejail-43b215ea3974244bd2fe982efe8f8d89d14f9e47.tar.zst firejail-43b215ea3974244bd2fe982efe8f8d89d14f9e47.zip | |
apparmor: allow execution from /usr/lib64
/usr/lib64 was missing from execution whitelist and it's used in openSUSE, see https://github.com/netblue30/firejail/issues/2078
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/firejail-default | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/firejail-default b/etc/firejail-default index 28103a598..91a293a52 100644 --- a/etc/firejail-default +++ b/etc/firejail-default | |||
| @@ -98,6 +98,7 @@ deny /**/.snapshots/ rwx, | |||
| 98 | /usr/sbin/** ix, | 98 | /usr/sbin/** ix, |
| 99 | /usr/local/** ix, | 99 | /usr/local/** ix, |
| 100 | /usr/lib/** ix, | 100 | /usr/lib/** ix, |
| 101 | /usr/lib64/** ix, | ||
| 101 | /usr/games/** ix, | 102 | /usr/games/** ix, |
| 102 | /opt/ r, | 103 | /opt/ r, |
| 103 | /opt/** r, | 104 | /opt/** r, |
| @@ -111,6 +112,7 @@ deny /**/.snapshots/ rwx, | |||
| 111 | /run/firejail/mnt/oroot/usr/sbin/** ix, | 112 | /run/firejail/mnt/oroot/usr/sbin/** ix, |
| 112 | /run/firejail/mnt/oroot/usr/local/** ix, | 113 | /run/firejail/mnt/oroot/usr/local/** ix, |
| 113 | /run/firejail/mnt/oroot/usr/lib/** ix, | 114 | /run/firejail/mnt/oroot/usr/lib/** ix, |
| 115 | /run/firejail/mnt/oroot/usr/lib64/** ix, | ||
| 114 | /run/firejail/mnt/oroot/usr/games/** ix, | 116 | /run/firejail/mnt/oroot/usr/games/** ix, |
| 115 | /run/firejail/mnt/oroot/opt/ r, | 117 | /run/firejail/mnt/oroot/opt/ r, |
| 116 | /run/firejail/mnt/oroot/opt/** r, | 118 | /run/firejail/mnt/oroot/opt/** r, |