profile fixes: allow bwrap inside the sandbox

This commit is contained in:
netblue30 2025-12-18 07:59:07 -05:00
parent 5e962ff78e
commit 411b97fdc9
2 changed files with 2 additions and 2 deletions

View file

@ -674,7 +674,7 @@ read-only ${HOME}/.local/share/flatpak/exports
blacklist ${HOME}/.local/share/flatpak/*
blacklist ${HOME}/.var
# most of the time bwrap is SUID binary
blacklist ${PATH}/bwrap
#blacklist ${PATH}/bwrap
blacklist ${RUNUSER}/.dbus-proxy
blacklist ${RUNUSER}/.flatpak
blacklist ${RUNUSER}/.flatpak-cache

View file

@ -49,7 +49,7 @@ seccomp
tracelog
disable-mnt
private-bin bash,dash,sh,warzone2100,warzone2100.real,which
private-bin bash,dash,sh,warzone2100,warzone2100.real,which,mkdir
private-dev
private-etc @games,@x11
private-tmp