diff options
| author |  smitsohu <smitsohu@gmail.com> | 2019-10-13 03:21:27 +0200 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2019-10-13 03:21:27 +0200 |
| commit | 6cec1f7e1bed4c39a26d45e73f0bba6a13980997 (patch) | |
| tree | 9b99d80cd3a05f83f685fd248839505b2c6b5fc7 /src/firejail/fs.c | |
| parent | shorten fedora firefox private-bin (diff) | |
| download | firejail-6cec1f7e1bed4c39a26d45e73f0bba6a13980997.tar.gz firejail-6cec1f7e1bed4c39a26d45e73f0bba6a13980997.tar.zst firejail-6cec1f7e1bed4c39a26d45e73f0bba6a13980997.zip | |
x11 hardening
Diffstat (limited to 'src/firejail/fs.c')
| -rw-r--r-- | src/firejail/fs.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/firejail/fs.c b/src/firejail/fs.c index f2639f318..003b15605 100644 --- a/src/firejail/fs.c +++ b/src/firejail/fs.c | |||
| @@ -1134,6 +1134,7 @@ void fs_private_tmp(void) { | |||
| 1134 | char *cmd; | 1134 | char *cmd; |
| 1135 | if (asprintf(&cmd, "whitelist %s", rp) == -1) | 1135 | if (asprintf(&cmd, "whitelist %s", rp) == -1) |
| 1136 | errExit("asprintf"); | 1136 | errExit("asprintf"); |
| 1137 | profile_check_line(cmd, 0, NULL); | ||
| 1137 | profile_add(cmd); // profile_add does not duplicate the string | 1138 | profile_add(cmd); // profile_add does not duplicate the string |
| 1138 | } | 1139 | } |
| 1139 | if (rp) | 1140 | if (rp) |
| @@ -1162,6 +1163,7 @@ void fs_private_tmp(void) { | |||
| 1162 | char *cmd; | 1163 | char *cmd; |
| 1163 | if (asprintf(&cmd, "whitelist /tmp/%s", entry->d_name) == -1) | 1164 | if (asprintf(&cmd, "whitelist /tmp/%s", entry->d_name) == -1) |
| 1164 | errExit("asprintf"); | 1165 | errExit("asprintf"); |
| 1166 | profile_check_line(cmd, 0, NULL); | ||
| 1165 | profile_add(cmd); // profile_add does not duplicate the string | 1167 | profile_add(cmd); // profile_add does not duplicate the string |
| 1166 | } | 1168 | } |
| 1167 | } | 1169 | } |