diff options
author | lxeiqr <lxeiqr@protonmail.com> | 2021-06-20 12:55:12 +0200 |
---|---|---|
committer | lxeiqr <lxeiqr@protonmail.com> | 2021-06-20 13:20:36 +0200 |
commit | 64d1ef47553415f7a5ef98667c0914ef0c0279a8 (patch) | |
tree | 421c2038dca88d49229578df353a8abbda7d171e /src | |
parent | Update etc/inc/whitelist-common.inc (diff) | |
download | firejail-64d1ef47553415f7a5ef98667c0914ef0c0279a8.tar.gz firejail-64d1ef47553415f7a5ef98667c0914ef0c0279a8.tar.zst firejail-64d1ef47553415f7a5ef98667c0914ef0c0279a8.zip |
Whitelist /tmp/sndio in private-tmp
Diffstat (limited to 'src')
-rw-r--r-- | src/firejail/fs.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/firejail/fs.c b/src/firejail/fs.c index e57038ee0..c30288d0d 100644 --- a/src/firejail/fs.c +++ b/src/firejail/fs.c | |||
@@ -1274,6 +1274,9 @@ void fs_private_tmp(void) { | |||
1274 | // read-only x11 directory | 1274 | // read-only x11 directory |
1275 | profile_add("read-only /tmp/.X11-unix"); | 1275 | profile_add("read-only /tmp/.X11-unix"); |
1276 | 1276 | ||
1277 | // whitelist sndio directory | ||
1278 | profile_add("whitelist /tmp/sndio"); | ||
1279 | |||
1277 | // whitelist any pulse* file in /tmp directory | 1280 | // whitelist any pulse* file in /tmp directory |
1278 | // some distros use PulseAudio sockets under /tmp instead of the socket in /urn/user | 1281 | // some distros use PulseAudio sockets under /tmp instead of the socket in /urn/user |
1279 | DIR *dir; | 1282 | DIR *dir; |