diff options
| author |  smitsohu <smitsohu@gmail.com> | 2021-06-03 18:47:30 +0200 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2021-06-03 18:47:30 +0200 |
| commit | acbdbe29da9a04bd3b7a6c584e7633aae8dbe5c5 (patch) | |
| tree | 3b7b09abebad7994c013c083c7d49bbd7b8ab27e /src/include | |
| parent | Update profile.template (diff) | |
| download | firejail-acbdbe29da9a04bd3b7a6c584e7633aae8dbe5c5.tar.gz firejail-acbdbe29da9a04bd3b7a6c584e7633aae8dbe5c5.tar.zst firejail-acbdbe29da9a04bd3b7a6c584e7633aae8dbe5c5.zip | |
simplify X11 socket whitelisting
Diffstat (limited to 'src/include')
| -rw-r--r-- | src/include/rundefs.h | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/src/include/rundefs.h b/src/include/rundefs.h index a172dd511..3db750da3 100644 --- a/src/include/rundefs.h +++ b/src/include/rundefs.h | |||
| @@ -79,12 +79,8 @@ | |||
| 79 | #define PATH_SECCOMP_MDWX_32 LIBDIR "/firejail/seccomp.mdwx.32" | 79 | #define PATH_SECCOMP_MDWX_32 LIBDIR "/firejail/seccomp.mdwx.32" |
| 80 | #define PATH_SECCOMP_BLOCK_SECONDARY LIBDIR "/firejail/seccomp.block_secondary" // secondary arch blocking filter built during make | 80 | #define PATH_SECCOMP_BLOCK_SECONDARY LIBDIR "/firejail/seccomp.block_secondary" // secondary arch blocking filter built during make |
| 81 | 81 | ||
| 82 | |||
| 83 | #define RUN_DEV_DIR RUN_MNT_DIR "/dev" | 82 | #define RUN_DEV_DIR RUN_MNT_DIR "/dev" |
| 84 | #define RUN_DEVLOG_FILE RUN_MNT_DIR "/devlog" | 83 | #define RUN_DEVLOG_FILE RUN_MNT_DIR "/devlog" |
| 85 | |||
| 86 | #define RUN_WHITELIST_X11_DIR RUN_MNT_DIR "/orig-x11" | ||
| 87 | |||
| 88 | #define RUN_XAUTHORITY_FILE RUN_MNT_DIR "/.Xauthority" // private options | 84 | #define RUN_XAUTHORITY_FILE RUN_MNT_DIR "/.Xauthority" // private options |
| 89 | #define RUN_XAUTH_FILE RUN_MNT_DIR "/xauth" // x11=xorg | 85 | #define RUN_XAUTH_FILE RUN_MNT_DIR "/xauth" // x11=xorg |
| 90 | #define RUN_XAUTHORITY_SEC_DIR RUN_MNT_DIR "/.sec.Xauthority" // x11=xorg | 86 | #define RUN_XAUTHORITY_SEC_DIR RUN_MNT_DIR "/.sec.Xauthority" // x11=xorg |