don't allow --x11 and --audit together

1 files changed, 8 insertions, 0 deletions

diff --git a/src/firejail/x11.c b/src/firejail/x11.c
index 090ff6f3b..15d600991 100644
--- a/src/firejail/x11.c
+++ b/src/firejail/x11.c
@@ -216,6 +216,10 @@ void x11_start_xephyr(int argc, char **argv) {
                         continue;
                 if (strcmp(argv[i], "--x11=xephyr") == 0)
                         continue;
+                if (strcmp(argv[i], "--audit") == 0 || strncmp(argv[i], "--audit=", 8) == 0) {
+                        fprintf(stderr, "Error: auditing x11 sandboxes is not supported\n");
+                        exit(1);
+                }
                 ptr += sprintf(ptr, "%s ", argv[i]);
         }
         if (arg_debug)
@@ -335,6 +339,10 @@ void x11_start_xpra(int argc, char **argv) {
                         continue;
                 if (strcmp(argv[i], "--x11=xephyr") == 0)
                         continue;
+                if (strcmp(argv[i], "--audit") == 0 || strncmp(argv[i], "--audit=", 8) == 0) {
+                        fprintf(stderr, "Error: auditing x11 sandboxes is not supported\n");
+                        exit(1);
+                }
                 ptr += sprintf(ptr, "%s ", argv[i]);
         }
         sprintf(ptr, "\"");