Merge pull request #1270 from SYN-cook/patch-1

completing noexec

1 files changed, 16 insertions, 16 deletions

diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c
index 5bfa06ade..3ff104d26 100644
--- a/src/firejail/sandbox.c
+++ b/src/firejail/sandbox.c
@@ -789,7 +789,23 @@ int sandbox(void* sandbox_arg) {
         //****************************
         if (checkcfg(CFG_DISABLE_MNT))
                 fs_mnt();
+        
+        //****************************
+        // nosound/no3d and fix for pulseaudio 7.0
+        //****************************
+        if (arg_nosound) {
+                // disable pulseaudio
+                pulseaudio_disable();
 
+                // disable /dev/snd
+                fs_dev_disable_sound();
+        }
+        else
+                pulseaudio_init();
+        
+        if (arg_no3d)
+                fs_dev_disable_3d();
+        
         //****************************
         // apply the profile file
         //****************************
@@ -809,22 +825,6 @@ int sandbox(void* sandbox_arg) {
         //****************************
         if (arg_trace || arg_tracelog)
                 fs_trace();
-                
-        //****************************
-        // nosound/no3d and fix for pulseaudio 7.0
-        //****************************
-        if (arg_nosound) {
-                // disable pulseaudio
-                pulseaudio_disable();
-
-                // disable /dev/snd
-                fs_dev_disable_sound();
-        }
-        else
-                pulseaudio_init();
-        
-        if (arg_no3d)
-                fs_dev_disable_3d();
         
         //****************************
         // set dns