github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

disable /dev/kmsg and /proc/kmsg

Browse source
This commit is contained in:
netblue30 2016-01-23 10:18:41 -05:00
parent 7583e1dac9
commit 9a6afbab3d
2 changed files with 12 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
etc/disable-common.inc
View file

@ -119,7 +119,3 @@ read-only ${HOME}/.xmonad
# The user ~/bin directory can override commands such as ls
read-only ${HOME}/bin
# syslog
blacklist /dev/kmsg
blacklist /proc/kmsg

12
src/firejail/fs.c
View file

@ -604,6 +604,18 @@ void fs_proc_sys_dev_boot(void) {
if (stat("/dev/port", &s) == 0) {
disable_file(BLACKLIST_FILE, "/dev/port");
}
if (getuid() != 0) {
// disable /dev/kmsg
if (stat("/dev/kmsg", &s) == 0) {
disable_file(BLACKLIST_FILE, "/dev/kmsg");
}
// disable /proc/kmsg
if (stat("/proc/kmsg", &s) == 0) {
disable_file(BLACKLIST_FILE, "/proc/kmsg");
}
}
}
// disable firejail configuration in /etc/firejail and in ~/.config/firejail