aboutsummaryrefslogtreecommitdiffstats
path: root/src/firejail/fs_home.c
diff options
context:
space:
mode:
authorLibravatar smitsohu <smitsohu@gmail.com>2018-08-02 21:23:50 +0200
committerLibravatar smitsohu <smitsohu@gmail.com>2018-08-02 21:23:50 +0200
commita920087f837dcf236acf9bc7a63494c34d72cc93 (patch)
tree9313a646b93a254fb2fefe43a88c486301749436 /src/firejail/fs_home.c
parentMerge branch 'master' of https://github.com/netblue30/firejail (diff)
downloadfirejail-a920087f837dcf236acf9bc7a63494c34d72cc93.tar.gz
firejail-a920087f837dcf236acf9bc7a63494c34d72cc93.tar.zst
firejail-a920087f837dcf236acf9bc7a63494c34d72cc93.zip
port whitelist path creation to "at" family of functions
Diffstat (limited to 'src/firejail/fs_home.c')
-rw-r--r--src/firejail/fs_home.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/firejail/fs_home.c b/src/firejail/fs_home.c
index 3afa3bf0c..09931bd56 100644
--- a/src/firejail/fs_home.c
+++ b/src/firejail/fs_home.c
@@ -290,6 +290,8 @@ void fs_private(void) {
290 if (u == 0 && arg_allusers) // allow --allusers when starting the sandbox as root 290 if (u == 0 && arg_allusers) // allow --allusers when starting the sandbox as root
291 ; 291 ;
292 else { 292 else {
293 if (arg_allusers)
294 fwarning("--allusers disabled by --private or --whitelist\n");
293 if (mount("tmpfs", "/home", "tmpfs", MS_NOSUID | MS_NODEV | MS_NOEXEC | MS_STRICTATIME | MS_REC, "mode=755,gid=0") < 0) 295 if (mount("tmpfs", "/home", "tmpfs", MS_NOSUID | MS_NODEV | MS_NOEXEC | MS_STRICTATIME | MS_REC, "mode=755,gid=0") < 0)
294 errExit("mounting home directory"); 296 errExit("mounting home directory");
295 fs_logger("tmpfs /home"); 297 fs_logger("tmpfs /home");