diff options
author | 2019-07-17 19:05:40 +0200 | |
---|---|---|
committer | 2019-07-18 09:36:20 +0200 | |
commit | 26aa2f91f92c5cc50136c04293c834f2f6a5bacd (patch) | |
tree | 181069b72f38f981ba208b5f017158863b998967 /etc | |
parent | Harden gnome-schedule (diff) | |
download | firejail-26aa2f91f92c5cc50136c04293c834f2f6a5bacd.tar.gz firejail-26aa2f91f92c5cc50136c04293c834f2f6a5bacd.tar.zst firejail-26aa2f91f92c5cc50136c04293c834f2f6a5bacd.zip |
use allow-debuggers in spectre-meltdown-checker
Diffstat (limited to 'etc')
-rw-r--r-- | etc/spectre-meltdown-checker.profile | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/spectre-meltdown-checker.profile b/etc/spectre-meltdown-checker.profile index ca2c2b435..cb4a74e11 100644 --- a/etc/spectre-meltdown-checker.profile +++ b/etc/spectre-meltdown-checker.profile | |||
@@ -6,8 +6,6 @@ include spectre-meltdown-checker.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | # sudo firejail --allow-debuggers spectre-meltdown-checker | ||
10 | |||
11 | noblacklist ${PATH}/mount | 9 | noblacklist ${PATH}/mount |
12 | noblacklist ${PATH}/umount | 10 | noblacklist ${PATH}/umount |
13 | 11 | ||
@@ -24,6 +22,7 @@ include disable-xdg.inc | |||
24 | 22 | ||
25 | include whitelist-var-common.inc | 23 | include whitelist-var-common.inc |
26 | 24 | ||
25 | allow-debuggers | ||
27 | caps.keep sys_rawio | 26 | caps.keep sys_rawio |
28 | ipc-namespace | 27 | ipc-namespace |
29 | net none | 28 | net none |