add caps.keep to chrome/chromium

2 files changed, 2 insertions, 0 deletions

diff --git a/etc/chromium.profile b/etc/chromium.profile
index 071c8a18a..ff51f6976 100644
--- a/etc/chromium.profile
+++ b/etc/chromium.profile
@@ -24,6 +24,7 @@ whitelist ~/.config/chromium-flags.conf
 
 include /etc/firejail/whitelist-common.inc
 
+caps.keep sys_chroot,sys_admin
 ipc-namespace
 netfilter
 nogroups
diff --git a/etc/google-chrome.profile b/etc/google-chrome.profile
index 38feb12a5..9cfafdb82 100644
--- a/etc/google-chrome.profile
+++ b/etc/google-chrome.profile
@@ -13,6 +13,7 @@ include /etc/firejail/disable-programs.inc
 # include /etc/firejail/disable-devel.inc
 #
 
+caps.keep sys_chroot,sys_admin
 netfilter
 
 whitelist ${DOWNLOADS}