summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--etc/xpra.profile6
1 files changed, 4 insertions, 2 deletions
diff --git a/etc/xpra.profile b/etc/xpra.profile
index f58b0eeb8..e5d86b9e9 100644
--- a/etc/xpra.profile
+++ b/etc/xpra.profile
@@ -21,7 +21,8 @@ include /etc/firejail/disable-passwdmgr.inc
21include /etc/firejail/disable-programs.inc 21include /etc/firejail/disable-programs.inc
22 22
23whitelist /var/lib/xkb 23whitelist /var/lib/xkb
24include /etc/firejail/whitelist-common.inc 24# whitelisting home directory, or including whitelist-common.inc
25# will crash xpra on some platforms
25 26
26caps.drop all 27caps.drop all
27# xpra needs to be allowed access to the abstract Unix socket namespace. 28# xpra needs to be allowed access to the abstract Unix socket namespace.
@@ -30,6 +31,8 @@ nonewprivs
30# In noroot mode, xpra cannot create a socket in the real /tmp/.X11-unix. 31# In noroot mode, xpra cannot create a socket in the real /tmp/.X11-unix.
31#noroot 32#noroot
32nosound 33nosound
34notv
35novideo
33protocol unix 36protocol unix
34seccomp 37seccomp
35shell none 38shell none
@@ -41,4 +44,3 @@ shell none
41private-dev 44private-dev
42# private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname,machine-id,xpra,X11 45# private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname,machine-id,xpra,X11
43private-tmp 46private-tmp
44notv