summaryrefslogtreecommitdiffstats
path: root/src/firejail/sandbox.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/firejail/sandbox.c')
-rw-r--r--src/firejail/sandbox.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c
index c105894bb..dd444f0b9 100644
--- a/src/firejail/sandbox.c
+++ b/src/firejail/sandbox.c
@@ -300,6 +300,9 @@ int sandbox(void* sandbox_arg) {
300#ifdef HAVE_CHROOT 300#ifdef HAVE_CHROOT
301 if (cfg.chrootdir) { 301 if (cfg.chrootdir) {
302 fs_chroot(cfg.chrootdir); 302 fs_chroot(cfg.chrootdir);
303 // redo cp command
304 fs_build_cp_command();
305
303 // force caps and seccomp if not started as root 306 // force caps and seccomp if not started as root
304 if (getuid() != 0) { 307 if (getuid() != 0) {
305 // force default seccomp inside the chroot, no keep or drop list 308 // force default seccomp inside the chroot, no keep or drop list
@@ -336,7 +339,7 @@ int sandbox(void* sandbox_arg) {
336 } 339 }
337 else 340 else
338#endif 341#endif
339 if (arg_overlay) 342 if (arg_overlay)
340 fs_overlayfs(); 343 fs_overlayfs();
341 else 344 else
342 fs_basic_fs(); 345 fs_basic_fs();