1 files changed, 33 insertions, 2 deletions

diff --git a/src/firejail/preproc.c b/src/firejail/preproc.c
index 6784ff5ac..2873571a9 100644
--- a/src/firejail/preproc.c
+++ b/src/firejail/preproc.c
@@ -56,14 +56,16 @@ void preproc_build_firejail_dir(void) {
                 create_empty_dir_as_root(RUN_FIREJAIL_APPIMAGE_DIR, 0755);
         }
         
+        if (stat(RUN_MNT_DIR, &s)) {
+                create_empty_dir_as_root(RUN_MNT_DIR, 0755);
+        }
+
         create_empty_file_as_root(RUN_RO_FILE, S_IRUSR);
         create_empty_dir_as_root(RUN_RO_DIR, S_IRUSR);
 }
 
 // build /run/firejail/mnt directory
 void preproc_mount_mnt_dir(void) {
-        struct stat s;
-        
         // mount tmpfs on top of /run/firejail/mnt
         if (!tmpfs_mounted) {
                 if (arg_debug)
@@ -72,6 +74,35 @@ void preproc_mount_mnt_dir(void) {
                         errExit("mounting /run/firejail/mnt");
                 tmpfs_mounted = 1;
                 fs_logger2("tmpfs", RUN_MNT_DIR);
+                
+                // create all seccomp files
+                // as root, create RUN_SECCOMP_I386 file
+                create_empty_file_as_root(RUN_SECCOMP_I386, 0644);
+                if (chown(RUN_SECCOMP_I386, getuid(), getgid()) == -1)
+                        errExit("chown");
+                if (chmod(RUN_SECCOMP_I386, 0644) == -1)
+                        errExit("chmod");
+
+                // as root, create RUN_SECCOMP_AMD64 file
+                create_empty_file_as_root(RUN_SECCOMP_AMD64, 0644);
+                if (chown(RUN_SECCOMP_AMD64, getuid(), getgid()) == -1)
+                        errExit("chown");
+                if (chmod(RUN_SECCOMP_AMD64, 0644) == -1)
+                        errExit("chmod");
+
+                // as root, create RUN_SECCOMP file
+                create_empty_file_as_root(RUN_SECCOMP_CFG, 0644);
+                if (chown(RUN_SECCOMP_CFG, getuid(), getgid()) == -1)
+                        errExit("chown");
+                if (chmod(RUN_SECCOMP_CFG, 0644) == -1)
+                        errExit("chmod");
+
+                // as root, create RUN_SECCOMP_PROTOCOL file
+                create_empty_file_as_root(RUN_SECCOMP_PROTOCOL, 0644);
+                if (chown(RUN_SECCOMP_PROTOCOL, getuid(), getgid()) == -1)
+                        errExit("chown");
+                if (chmod(RUN_SECCOMP_PROTOCOL, 0644) == -1)
+                        errExit("chmod");
         }
 }