github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

Fix Brave's native sandbox (#3087)

Browse source 
* Allow user access to /proc/config.gz

* Fix Brave's native sandbox

* Move /proc/config.gz to disable-common.inc

* Move /proc/config.gz to disable-common.inc
This commit is contained in:
glitsj16 2019-12-19 19:36:08 +00:00 • committed by GitHub
parent d0b3e2bf98
commit 81997259ef
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
etc/brave.profile
View file

@ -25,5 +25,8 @@ whitelist ${HOME}/.config/brave
whitelist ${HOME}/.config/brave-flags.conf
whitelist ${HOME}/.gnupg
# Brave sandbox needs read access to /proc/config.gz
noblacklist /proc/config.gz
# Redirect
include chromium-common.profile

3
etc/disable-common.inc
View file

@ -452,3 +452,6 @@ blacklist ${HOME}/Mail
blacklist ${HOME}/mail
blacklist ${HOME}/postponed
blacklist ${HOME}/sent
# kernel configuration
blacklist /proc/config.gz

3
src/firejail/fs.c
View file

@ -642,7 +642,8 @@ void fs_proc_sys_dev_boot(void) {
// various /proc files
disable_file(BLACKLIST_FILE, "/proc/irq");
disable_file(BLACKLIST_FILE, "/proc/bus");
disable_file(BLACKLIST_FILE, "/proc/config.gz");
// move /proc/config.gz to disable-common.inc
//disable_file(BLACKLIST_FILE, "/proc/config.gz");
disable_file(BLACKLIST_FILE, "/proc/sched_debug");
disable_file(BLACKLIST_FILE, "/proc/timer_list");
disable_file(BLACKLIST_FILE, "/proc/timer_stats");