diff options
author | netblue30 <netblue30@yahoo.com> | 2016-08-11 13:18:54 -0400 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2016-08-11 13:18:54 -0400 |
commit | ff025c119c6e77074e7d101d4c644820418ac19f (patch) | |
tree | 4557667562aacb7d0a3d0f1bd7c8dbb666e03c05 /src | |
parent | added quiet-by-default config option in /etc/firejail/firejail.config (diff) | |
download | firejail-ff025c119c6e77074e7d101d4c644820418ac19f.tar.gz firejail-ff025c119c6e77074e7d101d4c644820418ac19f.tar.zst firejail-ff025c119c6e77074e7d101d4c644820418ac19f.zip |
don't allow --x11 and --audit together
Diffstat (limited to 'src')
-rw-r--r-- | src/firejail/x11.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/firejail/x11.c b/src/firejail/x11.c index 090ff6f3b..15d600991 100644 --- a/src/firejail/x11.c +++ b/src/firejail/x11.c | |||
@@ -216,6 +216,10 @@ void x11_start_xephyr(int argc, char **argv) { | |||
216 | continue; | 216 | continue; |
217 | if (strcmp(argv[i], "--x11=xephyr") == 0) | 217 | if (strcmp(argv[i], "--x11=xephyr") == 0) |
218 | continue; | 218 | continue; |
219 | if (strcmp(argv[i], "--audit") == 0 || strncmp(argv[i], "--audit=", 8) == 0) { | ||
220 | fprintf(stderr, "Error: auditing x11 sandboxes is not supported\n"); | ||
221 | exit(1); | ||
222 | } | ||
219 | ptr += sprintf(ptr, "%s ", argv[i]); | 223 | ptr += sprintf(ptr, "%s ", argv[i]); |
220 | } | 224 | } |
221 | if (arg_debug) | 225 | if (arg_debug) |
@@ -335,6 +339,10 @@ void x11_start_xpra(int argc, char **argv) { | |||
335 | continue; | 339 | continue; |
336 | if (strcmp(argv[i], "--x11=xephyr") == 0) | 340 | if (strcmp(argv[i], "--x11=xephyr") == 0) |
337 | continue; | 341 | continue; |
342 | if (strcmp(argv[i], "--audit") == 0 || strncmp(argv[i], "--audit=", 8) == 0) { | ||
343 | fprintf(stderr, "Error: auditing x11 sandboxes is not supported\n"); | ||
344 | exit(1); | ||
345 | } | ||
338 | ptr += sprintf(ptr, "%s ", argv[i]); | 346 | ptr += sprintf(ptr, "%s ", argv[i]); |
339 | } | 347 | } |
340 | sprintf(ptr, "\""); | 348 | sprintf(ptr, "\""); |