nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

mozilla: allow firefox to use user namespaces for sandboxing

Browse Source 
Signed-off-by: bauen1 <j2468h@gmail.com>
This commit is contained in:
bauen1 2020-04-13 18:20:56 +02:00
parent 41963e7116
commit a4903dbf5b
No known key found for this signature in database
GPG Key ID: FF0AAF5E0812BA9C
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/apps/mozilla.te
View File

@ -74,7 +74,8 @@ xdg_cache_content(mozilla_xdg_cache_t)
#
allow mozilla_t self:capability { setgid setuid sys_nice };
allow mozilla_t self:process { sigkill signal setsched getsched setrlimit };
allow mozilla_t self:cap_userns { sys_admin sys_chroot sys_ptrace };
allow mozilla_t self:process { sigkill signal setcap setsched getsched setrlimit };
allow mozilla_t self:fifo_file rw_fifo_file_perms;
allow mozilla_t self:shm create_shm_perms;
allow mozilla_t self:sem create_sem_perms;