From 0169ebe193abdfeddbd17a764688d5f9e7a3cb78 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Sat, 20 Aug 2016 21:06:21 -0400 Subject: run time support to disable remounting of /proc and /sys --- etc/firejail.config | 3 +++ 1 file changed, 3 insertions(+) (limited to 'etc') diff --git a/etc/firejail.config b/etc/firejail.config index 82fe65ac7..1b8d5f4e3 100644 --- a/etc/firejail.config +++ b/etc/firejail.config @@ -3,6 +3,9 @@ # Most features are enabled by default. Use 'yes' or 'no' as configuration # values. +# Remount /proc and /sys inside the sandbox, default enabled. +# remount-proc-sys yes + # Enable or disable bind support, default enabled. # bind yes -- cgit v1.2.3-54-g00ecf