diff options
| -rw-r--r-- | src/firejail/fs.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/firejail/fs.c b/src/firejail/fs.c index bf7c0a4b2..f3ef97aeb 100644 --- a/src/firejail/fs.c +++ b/src/firejail/fs.c | |||
| @@ -1519,6 +1519,8 @@ void fs_private_tmp(void) { | |||
| 1519 | 1519 | ||
| 1520 | // whitelist x11 directory | 1520 | // whitelist x11 directory |
| 1521 | profile_add("whitelist /tmp/.X11-unix"); | 1521 | profile_add("whitelist /tmp/.X11-unix"); |
| 1522 | // read-only x11 directory | ||
| 1523 | profile_add("read-only /tmp/.X11-unix"); | ||
| 1522 | 1524 | ||
| 1523 | // whitelist any pulse* file in /tmp directory | 1525 | // whitelist any pulse* file in /tmp directory |
| 1524 | // some distros use PulseAudio sockets under /tmp instead of the socket in /urn/user | 1526 | // some distros use PulseAudio sockets under /tmp instead of the socket in /urn/user |