diff options
-rw-r--r-- | src/firejail/sandbox.c | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c index b2d49c1e7..42dfbc3a5 100644 --- a/src/firejail/sandbox.c +++ b/src/firejail/sandbox.c | |||
@@ -1143,9 +1143,6 @@ int sandbox(void* sandbox_arg) { | |||
1143 | errExit("fork"); | 1143 | errExit("fork"); |
1144 | 1144 | ||
1145 | if (app_pid == 0) { | 1145 | if (app_pid == 0) { |
1146 | // set rlimits | ||
1147 | set_rlimits(); | ||
1148 | |||
1149 | #ifdef HAVE_APPARMOR | 1146 | #ifdef HAVE_APPARMOR |
1150 | if (checkcfg(CFG_APPARMOR) && arg_apparmor) { | 1147 | if (checkcfg(CFG_APPARMOR) && arg_apparmor) { |
1151 | errno = 0; | 1148 | errno = 0; |
@@ -1158,6 +1155,8 @@ int sandbox(void* sandbox_arg) { | |||
1158 | printf("AppArmor enabled\n"); | 1155 | printf("AppArmor enabled\n"); |
1159 | } | 1156 | } |
1160 | #endif | 1157 | #endif |
1158 | // set rlimits | ||
1159 | set_rlimits(); | ||
1161 | 1160 | ||
1162 | prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); // kill the child in case the parent died | 1161 | prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); // kill the child in case the parent died |
1163 | start_application(0, fp); // start app | 1162 | start_application(0, fp); // start app |