diff options
Diffstat (limited to 'src/firejail/join.c')
-rw-r--r-- | src/firejail/join.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/firejail/join.c b/src/firejail/join.c index 9b5fba24d..6f1e9455c 100644 --- a/src/firejail/join.c +++ b/src/firejail/join.c | |||
@@ -292,16 +292,16 @@ void join(pid_t pid, int argc, char **argv, int index) { | |||
292 | if (apply_caps == 1) // not available for uid 0 | 292 | if (apply_caps == 1) // not available for uid 0 |
293 | caps_set(caps); | 293 | caps_set(caps); |
294 | #ifdef HAVE_SECCOMP | 294 | #ifdef HAVE_SECCOMP |
295 | // set protocol filter | 295 | // read cfg.protocol from file |
296 | if (getuid() != 0) | 296 | if (getuid() != 0) |
297 | protocol_filter_load(RUN_PROTOCOL_CFG); | 297 | protocol_filter_load(RUN_PROTOCOL_CFG); |
298 | if (cfg.protocol) { // not available for uid 0 | 298 | if (cfg.protocol) { // not available for uid 0 |
299 | protocol_filter(RUN_SECCOMP_PROTOCOL); | 299 | seccomp_load(RUN_SECCOMP_PROTOCOL); // install filter |
300 | } | 300 | } |
301 | 301 | ||
302 | // set seccomp filter | 302 | // set seccomp filter |
303 | if (apply_seccomp == 1) // not available for uid 0 | 303 | if (apply_seccomp == 1) // not available for uid 0 |
304 | seccomp_set(); | 304 | seccomp_load(RUN_SECCOMP_CFG); |
305 | #endif | 305 | #endif |
306 | 306 | ||
307 | // fix qt 4.8 | 307 | // fix qt 4.8 |