diff options
Diffstat (limited to 'src/firejail/main.c')
| -rw-r--r-- | src/firejail/main.c | 20 |
1 files changed, 10 insertions, 10 deletions
diff --git a/src/firejail/main.c b/src/firejail/main.c index 4d8ea20c3..0ce18ab01 100644 --- a/src/firejail/main.c +++ b/src/firejail/main.c | |||
| @@ -1505,16 +1505,16 @@ int main(int argc, char **argv, char **envp) { | |||
| 1505 | #ifdef HAVE_LANDLOCK | 1505 | #ifdef HAVE_LANDLOCK |
| 1506 | else if (strncmp(argv[i], "--landlock.enforce", 18) == 0) | 1506 | else if (strncmp(argv[i], "--landlock.enforce", 18) == 0) |
| 1507 | arg_landlock_enforce = 1; | 1507 | arg_landlock_enforce = 1; |
| 1508 | else if (strncmp(argv[i], "--landlock.read=", 16) == 0) | 1508 | else if (strncmp(argv[i], "--landlock.fs.read=", 19) == 0) |
| 1509 | ll_add_profile(LL_READ, argv[i] + 16); | 1509 | ll_add_profile(LL_FS_READ, argv[i] + 19); |
| 1510 | else if (strncmp(argv[i], "--landlock.write=", 17) == 0) | 1510 | else if (strncmp(argv[i], "--landlock.fs.write=", 20) == 0) |
| 1511 | ll_add_profile(LL_WRITE, argv[i] + 17); | 1511 | ll_add_profile(LL_FS_WRITE, argv[i] + 20); |
| 1512 | else if (strncmp(argv[i], "--landlock.makeipc=", 19) == 0) | 1512 | else if (strncmp(argv[i], "--landlock.fs.makeipc=", 22) == 0) |
| 1513 | ll_add_profile(LL_MAKEIPC, argv[i] + 19); | 1513 | ll_add_profile(LL_FS_MAKEIPC, argv[i] + 22); |
| 1514 | else if (strncmp(argv[i], "--landlock.makedev=", 19) == 0) | 1514 | else if (strncmp(argv[i], "--landlock.fs.makedev=", 22) == 0) |
| 1515 | ll_add_profile(LL_MAKEDEV, argv[i] + 19); | 1515 | ll_add_profile(LL_FS_MAKEDEV, argv[i] + 22); |
| 1516 | else if (strncmp(argv[i], "--landlock.execute=", 19) == 0) | 1516 | else if (strncmp(argv[i], "--landlock.fs.execute=", 22) == 0) |
| 1517 | ll_add_profile(LL_EXEC, argv[i] + 19); | 1517 | ll_add_profile(LL_FS_EXEC, argv[i] + 22); |
| 1518 | #endif | 1518 | #endif |
| 1519 | else if (strcmp(argv[i], "--memory-deny-write-execute") == 0) { | 1519 | else if (strcmp(argv[i], "--memory-deny-write-execute") == 0) { |
| 1520 | if (checkcfg(CFG_SECCOMP)) | 1520 | if (checkcfg(CFG_SECCOMP)) |