aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2017-08-11 14:59:34 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2017-08-11 14:59:34 -0400
commitdfc9f4a9ca38a7267cb0e992aec7bab9fc8d427b (patch)
treef455fbf9d95c4acd9d169e9f2e4e295ab7e74a67 /etc
parentadded notv to most profiles (diff)
downloadfirejail-dfc9f4a9ca38a7267cb0e992aec7bab9fc8d427b.tar.gz
firejail-dfc9f4a9ca38a7267cb0e992aec7bab9fc8d427b.tar.zst
firejail-dfc9f4a9ca38a7267cb0e992aec7bab9fc8d427b.zip
fix xpra profile
Diffstat (limited to 'etc')
-rw-r--r--etc/xpra.profile6
1 files changed, 4 insertions, 2 deletions
diff --git a/etc/xpra.profile b/etc/xpra.profile
index f58b0eeb8..e5d86b9e9 100644
--- a/etc/xpra.profile
+++ b/etc/xpra.profile
@@ -21,7 +21,8 @@ include /etc/firejail/disable-passwdmgr.inc
21include /etc/firejail/disable-programs.inc 21include /etc/firejail/disable-programs.inc
22 22
23whitelist /var/lib/xkb 23whitelist /var/lib/xkb
24include /etc/firejail/whitelist-common.inc 24# whitelisting home directory, or including whitelist-common.inc
25# will crash xpra on some platforms
25 26
26caps.drop all 27caps.drop all
27# xpra needs to be allowed access to the abstract Unix socket namespace. 28# xpra needs to be allowed access to the abstract Unix socket namespace.
@@ -30,6 +31,8 @@ nonewprivs
30# In noroot mode, xpra cannot create a socket in the real /tmp/.X11-unix. 31# In noroot mode, xpra cannot create a socket in the real /tmp/.X11-unix.
31#noroot 32#noroot
32nosound 33nosound
34notv
35novideo
33protocol unix 36protocol unix
34seccomp 37seccomp
35shell none 38shell none
@@ -41,4 +44,3 @@ shell none
41private-dev 44private-dev
42# private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname,machine-id,xpra,X11 45# private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname,machine-id,xpra,X11
43private-tmp 46private-tmp
44notv