From 511cad9ed24a544f607193d74bfef8a449fe3a0b Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Sun, 25 Aug 2019 19:12:00 +0200 Subject: Use new seccomp syntax from #2926 --- etc/firefox-common.profile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'etc/firefox-common.profile') diff --git a/etc/firefox-common.profile b/etc/firefox-common.profile index 6ad4a9bc2..02d6199a0 100644 --- a/etc/firefox-common.profile +++ b/etc/firefox-common.profile @@ -46,7 +46,7 @@ notv ?BROWSER_DISABLE_U2F: nou2f protocol unix,inet,inet6,netlink # The below seccomp configuration still permits chroot syscall. See https://github.com/netblue30/firejail/issues/2506 for possible workarounds. -seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice +seccomp !chroot shell none # Disable tracelog, it breaks or causes major issues with many firefox based browsers, see https://github.com/netblue30/firejail/issues/1930. #tracelog -- cgit v1.2.3-70-g09d2