diff options
Diffstat (limited to 'src/firejail/sandbox.c')
-rw-r--r-- | src/firejail/sandbox.c | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c index 2c5c5fc12..841d57c89 100644 --- a/src/firejail/sandbox.c +++ b/src/firejail/sandbox.c | |||
@@ -623,6 +623,16 @@ int sandbox(void* sandbox_arg) { | |||
623 | errExit("mounting " RUN_FIREJAIL_LIB_DIR); | 623 | errExit("mounting " RUN_FIREJAIL_LIB_DIR); |
624 | 624 | ||
625 | //**************************** | 625 | //**************************** |
626 | // mount new proc filesystem | ||
627 | // representing the pid namespace | ||
628 | //**************************** | ||
629 | |||
630 | if (arg_debug) | ||
631 | printf("Remounting /proc filesystem\n"); | ||
632 | if (mount("proc", "/proc", "proc", MS_NOSUID | MS_NOEXEC | MS_NODEV | MS_REC, NULL) < 0) | ||
633 | errExit("mounting /proc"); | ||
634 | |||
635 | //**************************** | ||
626 | // log sandbox data | 636 | // log sandbox data |
627 | //**************************** | 637 | //**************************** |
628 | if (cfg.name) | 638 | if (cfg.name) |