From cbcf7fafe3b2b116f887907c1d7882904564f026 Mon Sep 17 00:00:00 2001
From: smitsohu <smitsohu@gmail.com>
Date: Wed, 8 Jan 2020 01:06:08 +0100
Subject: allow chroot syscall where apps depend on QtWebengine

derived from QtWebengine reverse dependencies
---
 etc/digikam.profile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'etc/digikam.profile')

diff --git a/etc/digikam.profile b/etc/digikam.profile
index 1b80981f7..e66434444 100644
--- a/etc/digikam.profile
+++ b/etc/digikam.profile
@@ -32,7 +32,8 @@ nonewprivs
 noroot
 notv
 protocol unix,inet,inet6,netlink
-seccomp
+# QtWebengine needs chroot to set up its own sandbox
+seccomp !chroot
 shell none
 
 # private-dev - prevents libdc1394 loading; this lib is used to connect to a camera device
-- 
cgit v1.2.3-70-g09d2