Skip to content

Instantly share code, notes, and snippets.

@glitsj16

glitsj16/fs.c.patch

Created December 16, 2019 05:01
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save glitsj16/80efb9a399187d3df6ec92aa34572c89 to your computer and use it in GitHub Desktop.
Save glitsj16/80efb9a399187d3df6ec92aa34572c89 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
fs.c.patch
--- a/src/firejail/fs.c
+++ b/src/firejail/fs.c
@@ -642,7 +642,11 @@
// various /proc files
disable_file(BLACKLIST_FILE, "/proc/irq");
disable_file(BLACKLIST_FILE, "/proc/bus");
- disable_file(BLACKLIST_FILE, "/proc/config.gz");
+ { // allow user access to /proc/config.gz by specifying 'noblacklist' option
+ EUID_USER();
+ profile_add("blacklist /proc/config.gz");
+ EUID_ROOT();
+ }
disable_file(BLACKLIST_FILE, "/proc/sched_debug");
disable_file(BLACKLIST_FILE, "/proc/timer_list");
disable_file(BLACKLIST_FILE, "/proc/timer_stats");
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment