1 files changed, 16 insertions, 0 deletions

diff --git a/etc/firejail-default b/etc/firejail-default
index 842d5a0c4..5ebdccc00 100644
--- a/etc/firejail-default
+++ b/etc/firejail-default
@@ -61,6 +61,9 @@ owner /{run,dev}/shm/** rmwk,
 /run/firejail/mnt/oroot/{run,dev}/shm/ r,
 owner /run/firejail/mnt/oroot/{run,dev}/shm/** rmwk,
 
+# Needed for wine
+/{,var/}run/firejail/profile/@{PID} w,
+
 ##########
 # Mask /proc and /sys information leakage. The configuration here is barely
 # enough to run "top" or "ps aux".
@@ -74,6 +77,7 @@ owner /run/firejail/mnt/oroot/{run,dev}/shm/** rmwk,
 /proc/stat r,
 /proc/sys/kernel/pid_max r,
 /proc/sys/kernel/shmmax r,
+/proc/sys/kernel/yama/ptrace_scope r,
 /proc/sys/vm/overcommit_memory r,
 /proc/sys/vm/overcommit_ratio r,
 /proc/sys/kernel/random/uuid r,
@@ -95,15 +99,22 @@ owner /run/firejail/mnt/oroot/{run,dev}/shm/** rmwk,
 /proc/@{PID}/statm r,
 /proc/@{PID}/status r,
 /proc/@{PID}/task/@{PID}/stat r,
+/proc/@{PID}/task/@{PID}/status r,
 /proc/@{PID}/maps r,
+/proc/@{PID}/mem r,
 /proc/@{PID}/mounts r,
 /proc/@{PID}/mountinfo r,
+owner /proc/@{PID}/oom_adj w,
 /proc/@{PID}/oom_score_adj r,
+owner /proc/@{PID}/oom_score_adj w,
 /proc/@{PID}/auxv r,
 /proc/@{PID}/net/dev r,
 /proc/@{PID}/loginuid r,
 /proc/@{PID}/environ r,
 
+# Needed for chromium
+ptrace (trace tracedby),
+
 ##########
 # Allow running programs only from well-known system directories. If you need
 # to run programs from your home directory, uncomment /home line.
@@ -135,6 +146,11 @@ owner /run/firejail/mnt/oroot/{run,dev}/shm/** rmwk,
 /run/firejail/mnt/oroot/opt/** ix,
 
 ##########
+# Allow acces to cups printing socket
+##########
+/run/cups/cups.sock w,
+
+##########
 # Allow all networking functionality, and control it from Firejail.
 ##########
 network inet,