Whitelist /tmp/sndio in private-tmp

This commit is contained in:
lxeiqr 2021-06-20 12:55:12 +02:00
parent e6f573b39f
commit 64d1ef4755

View file

@ -1274,6 +1274,9 @@ void fs_private_tmp(void) {
// read-only x11 directory
profile_add("read-only /tmp/.X11-unix");
// whitelist sndio directory
profile_add("whitelist /tmp/sndio");
// whitelist any pulse* file in /tmp directory
// some distros use PulseAudio sockets under /tmp instead of the socket in /urn/user
DIR *dir;