diff options
| author |  rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-07-28 09:03:17 +0200 |
|---|---|---|
| committer | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-07-28 09:03:17 +0200 |
| commit | 9ca0d7a75756e786db4777f27ef7395a92d74700 (patch) | |
| tree | 2aff743fa2821fd5270dbed0da1f5e4b4386ba77 /etc | |
| parent | Merge pull request #4410 from kmk3/revert-allow-deny-etc (diff) | |
| download | firejail-9ca0d7a75756e786db4777f27ef7395a92d74700.tar.gz firejail-9ca0d7a75756e786db4777f27ef7395a92d74700.tar.zst firejail-9ca0d7a75756e786db4777f27ef7395a92d74700.zip | |
kcmp is allowed by default, no need to add seccomp exceptions for it anylonger
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/profile-a-l/chromium-common-hardened.inc.profile | 3 | ||||
| -rw-r--r-- | etc/profile-m-z/minitube.profile | 2 |
2 files changed, 2 insertions, 3 deletions
diff --git a/etc/profile-a-l/chromium-common-hardened.inc.profile b/etc/profile-a-l/chromium-common-hardened.inc.profile index 87a0a0994..19addd285 100644 --- a/etc/profile-a-l/chromium-common-hardened.inc.profile +++ b/etc/profile-a-l/chromium-common-hardened.inc.profile | |||
| @@ -6,5 +6,4 @@ caps.drop all | |||
| 6 | nonewprivs | 6 | nonewprivs |
| 7 | noroot | 7 | noroot |
| 8 | protocol unix,inet,inet6,netlink | 8 | protocol unix,inet,inet6,netlink |
| 9 | # kcmp is required for ozone-platform=wayland, see #3783. | 9 | seccomp !chroot |
| 10 | seccomp !chroot,!kcmp | ||
diff --git a/etc/profile-m-z/minitube.profile b/etc/profile-m-z/minitube.profile index 3fe3428d0..b8a551b6c 100644 --- a/etc/profile-m-z/minitube.profile +++ b/etc/profile-m-z/minitube.profile | |||
| @@ -47,7 +47,7 @@ notv | |||
| 47 | nou2f | 47 | nou2f |
| 48 | novideo | 48 | novideo |
| 49 | protocol unix,inet,inet6,netlink | 49 | protocol unix,inet,inet6,netlink |
| 50 | seccomp !kcmp | 50 | seccomp |
| 51 | shell none | 51 | shell none |
| 52 | tracelog | 52 | tracelog |
| 53 | 53 | ||