diff options
author | netblue30 <netblue30@yahoo.com> | 2016-10-01 13:50:58 -0400 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2016-10-01 13:50:58 -0400 |
commit | 27bffbfeb2295f7d460f78dd93e02aa2f9b0a00c (patch) | |
tree | da675f6056ea3e4dd2386c447c6eca0c072ac252 /src/firejail/fs_trace.c | |
parent | potential Gentoo fix (diff) | |
download | firejail-27bffbfeb2295f7d460f78dd93e02aa2f9b0a00c.tar.gz firejail-27bffbfeb2295f7d460f78dd93e02aa2f9b0a00c.tar.zst firejail-27bffbfeb2295f7d460f78dd93e02aa2f9b0a00c.zip |
disable x11 abstract socket for --x11=block
Diffstat (limited to 'src/firejail/fs_trace.c')
-rw-r--r-- | src/firejail/fs_trace.c | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/src/firejail/fs_trace.c b/src/firejail/fs_trace.c index bab117b7e..861b8a9a7 100644 --- a/src/firejail/fs_trace.c +++ b/src/firejail/fs_trace.c | |||
@@ -54,15 +54,17 @@ void fs_trace(void) { | |||
54 | FILE *fp = fopen(RUN_LDPRELOAD_FILE, "w"); | 54 | FILE *fp = fopen(RUN_LDPRELOAD_FILE, "w"); |
55 | if (!fp) | 55 | if (!fp) |
56 | errExit("fopen"); | 56 | errExit("fopen"); |
57 | if (arg_trace) | 57 | if (arg_trace) { |
58 | fprintf(fp, "%s/firejail/libtrace.so\n", LIBDIR); | 58 | fprintf(fp, "%s/firejail/libtrace.so\n", LIBDIR); |
59 | } | ||
59 | else if (arg_tracelog) { | 60 | else if (arg_tracelog) { |
60 | fprintf(fp, "%s/firejail/libtracelog.so\n", LIBDIR); | 61 | fprintf(fp, "%s/firejail/libtracelog.so\n", LIBDIR); |
61 | if (!arg_quiet) | 62 | if (!arg_quiet) |
62 | printf("Blacklist violations are logged to syslog\n"); | 63 | printf("Blacklist violations are logged to syslog\n"); |
63 | } | 64 | } |
64 | else | 65 | |
65 | assert(0); | 66 | if (mask_x11_abstract_socket) |
67 | fprintf(fp, "%s/firejail/libx11.so\n", LIBDIR); | ||
66 | 68 | ||
67 | SET_PERMS_STREAM(fp, 0, 0, S_IRUSR | S_IWRITE | S_IRGRP | S_IROTH); | 69 | SET_PERMS_STREAM(fp, 0, 0, S_IRUSR | S_IWRITE | S_IRGRP | S_IROTH); |
68 | fclose(fp); | 70 | fclose(fp); |