6 files changed, 16 insertions, 16 deletions

diff --git a/RELNOTES b/RELNOTES
index d4e8c9e43..7d0f037da 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -1,5 +1,4 @@
-firejail (0.9.47) baseline; urgency=low
-  * work in progress
+firejail (0.9.48) baseline; urgency=low
   * modifs: whitelisted Transmission, Deluge, qBitTorrent, KTorrent;
     please use ~/Downloads directory for saving files
   * modifs: AppArmor made optional; a warning is printed on the screen
@@ -10,7 +9,7 @@ firejail (0.9.47) baseline; urgency=low
   * feature: profile support in overlayfs mode
   * new profiles: vym, darktable, Waterfox, digiKam, Catfish, HandBrake
   * bugfixes
- -- netblue30 <netblue30@yahoo.com>  Tue, 23 May 2017 08:00:00 -0500
+ -- netblue30 <netblue30@yahoo.com>  Mon, 12 Jun 2017 08:00:00 -0500
 
 firejail (0.9.46) baseline; urgency=low
   * security: split most of networking code in a separate executable
diff --git a/configure b/configure
index 2de213647..72c0b242c 100755
--- a/configure
+++ b/configure
@@ -1,6 +1,6 @@
 #! /bin/sh
 # Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.69 for firejail 0.9.47.
+# Generated by GNU Autoconf 2.69 for firejail 0.9.48.
 #
 # Report bugs to <netblue30@yahoo.com>.
 #
@@ -580,8 +580,8 @@ MAKEFLAGS=
 # Identity of this package.
 PACKAGE_NAME='firejail'
 PACKAGE_TARNAME='firejail'
-PACKAGE_VERSION='0.9.47'
-PACKAGE_STRING='firejail 0.9.47'
+PACKAGE_VERSION='0.9.48'
+PACKAGE_STRING='firejail 0.9.48'
 PACKAGE_BUGREPORT='netblue30@yahoo.com'
 PACKAGE_URL='http://firejail.wordpress.com'
 
@@ -1265,7 +1265,7 @@ if test "$ac_init_help" = "long"; then
   # Omit some internal or obsolete options to make the list less imposing.
   # This message is too long to be a string in the A/UX 3.1 sh.
   cat <<_ACEOF
-\`configure' configures firejail 0.9.47 to adapt to many kinds of systems.
+\`configure' configures firejail 0.9.48 to adapt to many kinds of systems.
 
 Usage: $0 [OPTION]... [VAR=VALUE]...
 
@@ -1326,7 +1326,7 @@ fi
 
 if test -n "$ac_init_help"; then
   case $ac_init_help in
-     short | recursive ) echo "Configuration of firejail 0.9.47:";;
+     short | recursive ) echo "Configuration of firejail 0.9.48:";;
    esac
   cat <<\_ACEOF
 
@@ -1434,7 +1434,7 @@ fi
 test -n "$ac_init_help" && exit $ac_status
 if $ac_init_version; then
   cat <<\_ACEOF
-firejail configure 0.9.47
+firejail configure 0.9.48
 generated by GNU Autoconf 2.69
 
 Copyright (C) 2012 Free Software Foundation, Inc.
@@ -1736,7 +1736,7 @@ cat >config.log <<_ACEOF
 This file contains any messages produced by compilers while
 running configure, to aid debugging if configure makes a mistake.
 
-It was created by firejail $as_me 0.9.47, which was
+It was created by firejail $as_me 0.9.48, which was
 generated by GNU Autoconf 2.69.  Invocation command line was
 
   $ $0 $@
@@ -4355,7 +4355,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 # report actual input values of CONFIG_FILES etc. instead of their
 # values after options handling.
 ac_log="
-This file was extended by firejail $as_me 0.9.47, which was
+This file was extended by firejail $as_me 0.9.48, which was
 generated by GNU Autoconf 2.69.  Invocation command line was
 
   CONFIG_FILES    = $CONFIG_FILES
@@ -4409,7 +4409,7 @@ _ACEOF
 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
 ac_cs_version="\\
-firejail config.status 0.9.47
+firejail config.status 0.9.48
 configured by $0, generated by GNU Autoconf 2.69,
   with options \\"\$ac_cs_config\\"
 
diff --git a/configure.ac b/configure.ac
index dc59e5b15..c0f5dd357 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.68])
-AC_INIT(firejail, 0.9.47, netblue30@yahoo.com, , http://firejail.wordpress.com)
+AC_INIT(firejail, 0.9.48, netblue30@yahoo.com, , http://firejail.wordpress.com)
 AC_CONFIG_SRCDIR([src/firejail/main.c])
 #AC_CONFIG_HEADERS([config.h])
 
diff --git a/src/firejail/appimage.c b/src/firejail/appimage.c
index 976750f8f..0f7ab40ff 100644
--- a/src/firejail/appimage.c
+++ b/src/firejail/appimage.c
@@ -31,17 +31,19 @@
 static char *devloop = NULL;    // device file
 static char *mntdir = NULL;     // mount point in /tmp directory
 
+#ifdef LOOP_CTL_GET_FREE        // test for older kernels; this definition is found in /usr/include/linux/loop.h
 static void err_loop(void) {
         fprintf(stderr, "Error: cannot configure loopback device\n");
         exit(1);
 }
+#endif
 
 void appimage_set(const char *appimage) {
         assert(appimage);
         assert(devloop == NULL);        // don't call this twice!
         EUID_ASSERT();
 
-#ifdef LOOP_CTL_GET_FREE        // test for older kernels; this definition is found in /usr/include/linux/loop.h
+#ifdef LOOP_CTL_GET_FREE
         // check appimage file
         invalid_filename(appimage);
         if (access(appimage, R_OK) == -1) {
diff --git a/src/firejail/fs_dev.c b/src/firejail/fs_dev.c
index 8ab176961..fdaa0b355 100644
--- a/src/firejail/fs_dev.c
+++ b/src/firejail/fs_dev.c
@@ -52,7 +52,7 @@ static DevEntry dev[] = {
         {"/dev/nvidia7", RUN_DEV_DIR "/nvidia7", 0, 1, 0},
         {"/dev/nvidia8", RUN_DEV_DIR "/nvidia8", 0, 1, 0},
         {"/dev/nvidia9", RUN_DEV_DIR "/nvidia9", 0, 1, 0},
-        {"/dev/nvidiactl", RUN_DEV_DIR "/nvidiactl", 0, 1},
+        {"/dev/nvidiactl", RUN_DEV_DIR "/nvidiactl", 0, 1, 0},
         {"/dev/nvidia-modeset", RUN_DEV_DIR "/nvidia-modeset", 0, 1, 0},
         {"/dev/nvidia-uvm", RUN_DEV_DIR "/nvidia-uvm", 0, 1, 0},
         {"/dev/video0", RUN_DEV_DIR "/video0", 0, 0, 1}, // video camera devices
diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c
index 7489e7b6d..4ee05d070 100644
--- a/src/firejail/sandbox.c
+++ b/src/firejail/sandbox.c
@@ -989,7 +989,6 @@ int sandbox(void* sandbox_arg) {
         if (app_pid == 0) {
 #ifdef HAVE_APPARMOR
                 if (arg_apparmor) {
-                        int done = 0;
                         errno = 0;
                         if (aa_change_onexec("firejail-default")) {
                                 fwarning("Cannot confine the application using AppArmor.\n"