diff options
author | 2022-06-03 07:02:31 -0400 | |
---|---|---|
committer | 2022-06-03 07:02:31 -0400 | |
commit | 6d0ff0c7db8d710ceae142a5cfd689bf100d57dc (patch) | |
tree | 8d7973ec02e518e2702e16e74981c8ad655a285a /src | |
parent | Merge pull request #5172 from kmk3/ds-add-ids-paths (diff) | |
download | firejail-6d0ff0c7db8d710ceae142a5cfd689bf100d57dc.tar.gz firejail-6d0ff0c7db8d710ceae142a5cfd689bf100d57dc.tar.zst firejail-6d0ff0c7db8d710ceae142a5cfd689bf100d57dc.zip |
enforce nonewprivs for --noprofile option
Diffstat (limited to 'src')
-rw-r--r-- | src/firejail/main.c | 2 | ||||
-rw-r--r-- | src/man/firejail.txt | 2 |
2 files changed, 3 insertions, 1 deletions
diff --git a/src/firejail/main.c b/src/firejail/main.c index cbf9df79f..f3b656e2e 100644 --- a/src/firejail/main.c +++ b/src/firejail/main.c | |||
@@ -1875,6 +1875,8 @@ int main(int argc, char **argv, char **envp) { | |||
1875 | arg_noprofile = 1; | 1875 | arg_noprofile = 1; |
1876 | // force keep-config-pulse in order to keep ~/.config/pulse as is | 1876 | // force keep-config-pulse in order to keep ~/.config/pulse as is |
1877 | arg_keep_config_pulse = 1; | 1877 | arg_keep_config_pulse = 1; |
1878 | // force nonewprivs | ||
1879 | arg_nonewprivs = 1; | ||
1878 | } | 1880 | } |
1879 | else if (strncmp(argv[i], "--ignore=", 9) == 0) { | 1881 | else if (strncmp(argv[i], "--ignore=", 9) == 0) { |
1880 | if (custom_profile) { | 1882 | if (custom_profile) { |
diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 420a96ab5..f78b75346 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt | |||
@@ -1696,7 +1696,7 @@ Disable printers. | |||
1696 | 1696 | ||
1697 | .TP | 1697 | .TP |
1698 | \fB\-\-noprofile | 1698 | \fB\-\-noprofile |
1699 | Do not use a security profile. | 1699 | Do not use a security profile. nonewprivs is enforced for this option. |
1700 | .br | 1700 | .br |
1701 | 1701 | ||
1702 | .br | 1702 | .br |