From 6be0964fd549be2ea9aec94e7fa2d870497b3996 Mon Sep 17 00:00:00 2001
From: "Kelvin M. Klann" <kmk3.code@protonmail.com>
Date: Thu, 29 Oct 2020 17:39:07 -0300
Subject: keepassxc.profile: Fix hang due to seccomp

With the current profile, keepassxc hangs on startup, before showing the
main window:

    $ uname -r -m
    5.9.1-artix1-1 x86_64
    $ firejail --version | head -n 1
    firejail version 0.9.64
    $ firejail --quiet keepassxc --version
    KeePassXC 2.6.2
    $ firejail --quiet keepassxc
    # (nothing happens)
    ^C

Seccomp debugging as explained on etc/templates/syscalls.txt:

    $ sudo grep -Eo 'keepassxc.* syscall=[0-9]+' /var/log/messages.log | tail -n 1
    keepassxc" exe="/usr/bin/keepassxc" sig=31 arch=c000003e syscall=303
    $ firejail --debug-syscalls | grep 303
    303     - name_to_handle_at

So allow the name_to_handle_at syscall.

Relates to #3549.
---
 etc/profile-a-l/keepassxc.profile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/etc/profile-a-l/keepassxc.profile b/etc/profile-a-l/keepassxc.profile
index 58db056b2..6a3b29c9d 100644
--- a/etc/profile-a-l/keepassxc.profile
+++ b/etc/profile-a-l/keepassxc.profile
@@ -54,7 +54,7 @@ notv
 nou2f
 novideo
 protocol unix,netlink
-seccomp
+seccomp !name_to_handle_at
 seccomp.block-secondary
 shell none
 tracelog
-- 
cgit v1.2.3-70-g09d2