aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar smitsohu <smitsohu@gmail.com>2018-04-09 17:04:05 +0200
committerLibravatar smitsohu <smitsohu@gmail.com>2018-04-09 17:04:05 +0200
commitd555463c624081d94b27abf67aa8b739fddf2162 (patch)
tree8bfd935078d51914115877890308ba29eecc9f83 /etc
parentnoroot uid/gid/supplementary group fixes; problems found by smitsohu (diff)
downloadfirejail-d555463c624081d94b27abf67aa8b739fddf2162.tar.gz
firejail-d555463c624081d94b27abf67aa8b739fddf2162.tar.zst
firejail-d555463c624081d94b27abf67aa8b739fddf2162.zip
add back shell=none to firefox-common
Diffstat (limited to 'etc')
-rw-r--r--etc/basilisk.profile1
-rw-r--r--etc/firefox-common.profile3
-rw-r--r--etc/palemoon.profile1
3 files changed, 1 insertions, 4 deletions
diff --git a/etc/basilisk.profile b/etc/basilisk.profile
index fe63a59f1..43ba5adcb 100644
--- a/etc/basilisk.profile
+++ b/etc/basilisk.profile
@@ -17,7 +17,6 @@ whitelist ${HOME}/.moonchild productions
17# Basilisk can use the full firejail seccomp filter (unlike firefox >= 60) 17# Basilisk can use the full firejail seccomp filter (unlike firefox >= 60)
18ignore seccomp.drop 18ignore seccomp.drop
19seccomp 19seccomp
20shell none
21 20
22#private-bin basilisk 21#private-bin basilisk
23# private-etc must first be enabled in firefox-common.profile 22# private-etc must first be enabled in firefox-common.profile
diff --git a/etc/firefox-common.profile b/etc/firefox-common.profile
index 843f41fee..9ebcdba6c 100644
--- a/etc/firefox-common.profile
+++ b/etc/firefox-common.profile
@@ -34,8 +34,7 @@ noroot
34notv 34notv
35protocol unix,inet,inet6,netlink 35protocol unix,inet,inet6,netlink
36seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice 36seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
37# shell none breaks firefox>=60, see issue #1765 37shell none
38# shell none
39tracelog 38tracelog
40 39
41disable-mnt 40disable-mnt
diff --git a/etc/palemoon.profile b/etc/palemoon.profile
index c68574df5..1104acff4 100644
--- a/etc/palemoon.profile
+++ b/etc/palemoon.profile
@@ -16,7 +16,6 @@ whitelist ${HOME}/.moonchild productions
16# Palemoon can use the full firejail seccomp filter (unlike firefox >= 60) 16# Palemoon can use the full firejail seccomp filter (unlike firefox >= 60)
17ignore seccomp.drop 17ignore seccomp.drop
18seccomp 18seccomp
19shell none
20 19
21#private-bin palemoon 20#private-bin palemoon
22# private-etc must first be enabled in firefox-common.profile 21# private-etc must first be enabled in firefox-common.profile