github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

drop cap_mac_admin in apparmor profile

Browse source
This commit is contained in:
smitsohu 2018-02-27 00:21:10 +01:00
parent e17b94286a
commit a052d9f2be
1 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
etc/firejail-default
View file

@ -113,7 +113,7 @@ deny /proc/@{PID}/oom_score_adj w,
/run/firejail/mnt/oroot/opt/** ix,
##########
# Allow acces to cups printing socket.
# Allow access to cups printing socket.
##########
/run/cups/cups.sock w,
@ -132,7 +132,8 @@ network raw,
signal,
##########
# We let Firejail deal with capabilities.
# We let Firejail deal with capabilities,
# but mac_admin should be dropped in any case.
##########
capability chown,
capability dac_override,
@ -167,7 +168,7 @@ capability audit_write,
capability audit_control,
capability setfcap,
capability mac_override,
capability mac_admin,
#capability mac_admin,
##########
# We let Firejail deal with mount/umount functionality.