diff options
author | 2015-11-12 08:33:34 -0500 | |
---|---|---|
committer | 2015-11-12 08:33:34 -0500 | |
commit | da90151010a39ccd106fbf9f20b449a1f0119bbe (patch) | |
tree | 1150dc98b23d1015e907e7c8146f015a6d6add22 /src/firejail/firejail.h | |
parent | fix symlink whitelist (diff) | |
download | firejail-da90151010a39ccd106fbf9f20b449a1f0119bbe.tar.gz firejail-da90151010a39ccd106fbf9f20b449a1f0119bbe.tar.zst firejail-da90151010a39ccd106fbf9f20b449a1f0119bbe.zip |
whitelist support for /tmp
Diffstat (limited to 'src/firejail/firejail.h')
-rw-r--r-- | src/firejail/firejail.h | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/src/firejail/firejail.h b/src/firejail/firejail.h index 58c497cd8..e3334bd2e 100644 --- a/src/firejail/firejail.h +++ b/src/firejail/firejail.h | |||
@@ -39,7 +39,8 @@ | |||
39 | #define DRI_DIR "/run/firejail/mnt/dri" | 39 | #define DRI_DIR "/run/firejail/mnt/dri" |
40 | #define PULSE_DIR "/run/firejail/mnt/pulse" | 40 | #define PULSE_DIR "/run/firejail/mnt/pulse" |
41 | #define DEVLOG_FILE "/run/firejail/mnt/devlog" | 41 | #define DEVLOG_FILE "/run/firejail/mnt/devlog" |
42 | #define WHITELIST_HOME_DIR "/run/firejail/mnt/whome" | 42 | #define WHITELIST_HOME_DIR "/run/firejail/mnt/orig-home" |
43 | #define WHITELIST_TMP_DIR "/run/firejail/mnt/orig-tmp" | ||
43 | #define XAUTHORITY_FILE "/run/firejail/mnt/.Xauthority" | 44 | #define XAUTHORITY_FILE "/run/firejail/mnt/.Xauthority" |
44 | #define HOSTNAME_FILE "/run/firejail/mnt/hostname" | 45 | #define HOSTNAME_FILE "/run/firejail/mnt/hostname" |
45 | #define RESOLVCONF_FILE "/run/firejail/mnt/resolv.conf" | 46 | #define RESOLVCONF_FILE "/run/firejail/mnt/resolv.conf" |
@@ -86,8 +87,12 @@ typedef struct interface_t { | |||
86 | 87 | ||
87 | typedef struct profile_entry_t { | 88 | typedef struct profile_entry_t { |
88 | struct profile_entry_t *next; | 89 | struct profile_entry_t *next; |
89 | char *data; // expanded name of the file | 90 | char *data; // command |
91 | |||
92 | // whitelist command parameters | ||
90 | char *link; // link name - set if the file is a link | 93 | char *link; // link name - set if the file is a link |
94 | unsigned home_dir:1; // whitelist in /home/user directory | ||
95 | unsigned tmp_dir:1; // whitelist in /tmp directory | ||
91 | }ProfileEntry; | 96 | }ProfileEntry; |
92 | 97 | ||
93 | typedef struct config_t { | 98 | typedef struct config_t { |