aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar smitsohu <smitsohu@gmail.com>2017-12-08 01:14:14 +0100
committerLibravatar smitsohu <smitsohu@gmail.com>2017-12-08 01:14:14 +0100
commitb19757e2e50b5800b203e15eca58559282e254b4 (patch)
tree1a8c808b035980b67ac85faafc4e367dd2cb63d7 /etc
parentfix sound in firefox started from thunderbird (diff)
downloadfirejail-b19757e2e50b5800b203e15eca58559282e254b4.tar.gz
firejail-b19757e2e50b5800b203e15eca58559282e254b4.tar.zst
firejail-b19757e2e50b5800b203e15eca58559282e254b4.zip
pedantic comment fix
Diffstat (limited to 'etc')
-rw-r--r--etc/baloo_file.profile2
-rw-r--r--etc/clementine.profile2
-rw-r--r--etc/simple-scan.profile2
-rw-r--r--etc/skanlite.profile2
4 files changed, 4 insertions, 4 deletions
diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile
index f6dbb480b..e265bcd82 100644
--- a/etc/baloo_file.profile
+++ b/etc/baloo_file.profile
@@ -29,7 +29,7 @@ nosound
29notv 29notv
30novideo 30novideo
31protocol unix 31protocol unix
32# Baloo makes ioprio_set system calls, which are blacklisted by default. 32# blacklisting of ioprio_set system calls breaks baloo_file
33seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice 33seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice
34shell none 34shell none
35# x11 xorg 35# x11 xorg
diff --git a/etc/clementine.profile b/etc/clementine.profile
index f4a3301b6..a736f7bf9 100644
--- a/etc/clementine.profile
+++ b/etc/clementine.profile
@@ -20,7 +20,7 @@ noroot
20notv 20notv
21novideo 21novideo
22protocol unix,inet,inet6 22protocol unix,inet,inet6
23# Clementine makes ioprio_set system calls, which are blacklisted by default. 23# blacklisting of ioprio_set system calls breaks clementine
24seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice 24seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice
25 25
26private-dev 26private-dev
diff --git a/etc/simple-scan.profile b/etc/simple-scan.profile
index b7dc3c57c..a205024cc 100644
--- a/etc/simple-scan.profile
+++ b/etc/simple-scan.profile
@@ -22,7 +22,7 @@ nosound
22notv 22notv
23# novideo 23# novideo
24protocol unix,inet,inet6,netlink 24protocol unix,inet,inet6,netlink
25# simple-scan makes ioperm system calls, which are blacklisted by default. 25# blacklisting of ioperm system calls breaks simple-scan
26seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice 26seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
27shell none 27shell none
28tracelog 28tracelog
diff --git a/etc/skanlite.profile b/etc/skanlite.profile
index f1a64093a..a9a8fdad6 100644
--- a/etc/skanlite.profile
+++ b/etc/skanlite.profile
@@ -23,7 +23,7 @@ nosound
23notv 23notv
24# novideo 24# novideo
25protocol unix,netlink 25protocol unix,netlink
26# skanlite makes ioperm system calls, which are blacklisted by default. 26# blacklisting of ioperm system calls breaks skanlite
27seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice 27seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
28shell none 28shell none
29 29