aboutsummaryrefslogtreecommitdiffstats
path: root/src/firejail/fs.c
diff options
context:
space:
mode:
authorLibravatar lxeiqr <lxeiqr@protonmail.com>2021-06-20 12:55:12 +0200
committerLibravatar lxeiqr <lxeiqr@protonmail.com>2021-06-20 13:20:36 +0200
commit64d1ef47553415f7a5ef98667c0914ef0c0279a8 (patch)
tree421c2038dca88d49229578df353a8abbda7d171e /src/firejail/fs.c
parentUpdate etc/inc/whitelist-common.inc (diff)
downloadfirejail-64d1ef47553415f7a5ef98667c0914ef0c0279a8.tar.gz
firejail-64d1ef47553415f7a5ef98667c0914ef0c0279a8.tar.zst
firejail-64d1ef47553415f7a5ef98667c0914ef0c0279a8.zip
Whitelist /tmp/sndio in private-tmp
Diffstat (limited to 'src/firejail/fs.c')
-rw-r--r--src/firejail/fs.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/src/firejail/fs.c b/src/firejail/fs.c
index e57038ee0..c30288d0d 100644
--- a/src/firejail/fs.c
+++ b/src/firejail/fs.c
@@ -1274,6 +1274,9 @@ void fs_private_tmp(void) {
1274 // read-only x11 directory 1274 // read-only x11 directory
1275 profile_add("read-only /tmp/.X11-unix"); 1275 profile_add("read-only /tmp/.X11-unix");
1276 1276
1277 // whitelist sndio directory
1278 profile_add("whitelist /tmp/sndio");
1279
1277 // whitelist any pulse* file in /tmp directory 1280 // whitelist any pulse* file in /tmp directory
1278 // some distros use PulseAudio sockets under /tmp instead of the socket in /urn/user 1281 // some distros use PulseAudio sockets under /tmp instead of the socket in /urn/user
1279 DIR *dir; 1282 DIR *dir;