reverted sandbox.c fix from #1270, breaking pulseaudio

1 files changed, 14 insertions, 14 deletions

diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c
index 0b4d63c1b..7f82e2253 100644
--- a/src/firejail/sandbox.c
+++ b/src/firejail/sandbox.c
@@ -791,6 +791,20 @@ int sandbox(void* sandbox_arg) {
                 fs_mnt();
 
         //****************************
+        // apply the profile file
+        //****************************
+        // apply all whitelist commands ...
+        if (cfg.chrootdir)
+                fwarning("whitelist feature is disabled in chroot\n");
+        else if (arg_overlay)
+                fwarning("whitelist feature is disabled in overlay\n");
+        else
+                fs_whitelist();
+
+        // ... followed by blacklist commands
+        fs_blacklist(); // mkdir and mkfile are processed all over again
+
+        //****************************
         // nosound/no3d and fix for pulseaudio 7.0
         //****************************
         if (arg_nosound) {
@@ -815,20 +829,6 @@ int sandbox(void* sandbox_arg) {
         }
 
         //****************************
-        // apply the profile file
-        //****************************
-        // apply all whitelist commands ...
-        if (cfg.chrootdir)
-                fwarning("whitelist feature is disabled in chroot\n");
-        else if (arg_overlay)
-                fwarning("whitelist feature is disabled in overlay\n");
-        else
-                fs_whitelist();
-
-        // ... followed by blacklist commands
-        fs_blacklist(); // mkdir and mkfile are processed all over again
-
-        //****************************
         // install trace
         //****************************
         if (arg_trace || arg_tracelog)