3 files changed, 13 insertions, 4 deletions

diff --git a/README.md b/README.md
index a6c69c336..22fd03b9f 100644
--- a/README.md
+++ b/README.md
@@ -205,6 +205,7 @@ Stats:
     private-bin                 689
     private-dev                 1041
     private-etc                 539
+    private-lib                 70
     private-tmp                 915
     whitelist home directory    573
     whitelist var               855   (include whitelist-var-common.inc)
@@ -213,8 +214,8 @@ Stats:
     whitelist usr/share         628   (include whitelist-usr-share-common.inc
     net none                    403
     dbus-user none              673
-    dbus-user filter            122
-    dbus-system none            832
+    dbus-user filter            123
+    dbus-system none            833
     dbus-system filter          12
 ```
 
diff --git a/etc/firejail.config b/etc/firejail.config
index 7f40eb5ed..9d37b4d8a 100644
--- a/etc/firejail.config
+++ b/etc/firejail.config
@@ -93,8 +93,8 @@
 # Enable or disable private-home feature, default enabled
 # private-home yes
 
-# Enable or disable private-lib feature, default enabled
-# private-lib yes
+# Enable or disable private-lib feature, default disabled
+# private-lib no
 
 # Enable or disable private-opt feature, default enabled.
 # private-opt yes
diff --git a/src/profstats/main.c b/src/profstats/main.c
index 595a94c11..9deb72f7e 100644
--- a/src/profstats/main.c
+++ b/src/profstats/main.c
@@ -38,6 +38,7 @@ static int cnt_privatebin = 0;
 static int cnt_privatedev = 0;
 static int cnt_privatetmp = 0;
 static int cnt_privateetc = 0;
+static int cnt_privatelib = 0;
 static int cnt_whitelistvar = 0;        // include whitelist-var-common.inc
 static int cnt_whitelistrunuser = 0;    // include whitelist-runuser-common.inc
 static int cnt_whitelistusrshare = 0;   // include whitelist-usr-share-common.inc
@@ -56,6 +57,7 @@ static int arg_privatebin = 0;
 static int arg_privatedev = 0;
 static int arg_privatetmp = 0;
 static int arg_privateetc = 0;
+static int arg_privatelib = 0;
 static int arg_whitelistvar = 0;
 static int arg_whitelistrunuser = 0;
 static int arg_whitelistusrshare = 0;
@@ -181,6 +183,8 @@ static void process_file(char *fname) {
                         cnt_privatetmp++;
                 else if (strncmp(ptr, "private-etc", 11) == 0)
                         cnt_privateetc++;
+                else if (strncmp(ptr, "private-lib", 11) == 0)
+                        cnt_privatelib++;
                 else if (strncmp(ptr, "dbus-system none", 16) == 0)
                         cnt_dbus_system_none++;
                 else if (strncmp(ptr, "dbus-system", 11) == 0)
@@ -297,6 +301,7 @@ int main(int argc, char **argv) {
                 int privatetmp = cnt_privatetmp;
                 int privatedev = cnt_privatedev;
                 int privateetc = cnt_privateetc;
+                int privatelib = cnt_privatelib;
                 int dotlocal = cnt_dotlocal;
                 int globalsdotlocal = cnt_globalsdotlocal;
                 int whitelisthome = cnt_whitelisthome;
@@ -360,6 +365,8 @@ int main(int argc, char **argv) {
                         printf("No private-tmp found in %s\n", argv[i]);
                 if (arg_privateetc && privateetc == cnt_privateetc)
                         printf("No private-etc found in %s\n", argv[i]);
+                if (arg_privatelib && privatelib == cnt_privatelib)
+                        printf("No private-lib found in %s\n", argv[i]);
                 if (arg_whitelisthome && whitelisthome == cnt_whitelisthome)
                         printf("Home directory not whitelisted in %s\n", argv[i]);
                 if (arg_whitelistvar && whitelistvar == cnt_whitelistvar)
@@ -394,6 +401,7 @@ int main(int argc, char **argv) {
         printf("    private-bin\t\t\t%d\n", cnt_privatebin);
         printf("    private-dev\t\t\t%d\n", cnt_privatedev);
         printf("    private-etc\t\t\t%d\n", cnt_privateetc);
+        printf("    private-lib\t\t\t%d\n", cnt_privatelib);
         printf("    private-tmp\t\t\t%d\n", cnt_privatetmp);
         printf("    whitelist home directory\t%d\n", cnt_whitelisthome);
         printf("    whitelist var\t\t%d   (include whitelist-var-common.inc)\n", cnt_whitelistvar);