Skip to content

Commit

Permalink
bugfix: do not interact with dbus directory if dbus proxy is disabled
Browse files Browse the repository at this point in the history
  • Loading branch information
powerjungle committed Dec 29, 2024
1 parent df6620c commit b5d4ea3
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions src/firejail/preproc.c
Original file line number Diff line number Diff line change
Expand Up @@ -142,8 +142,10 @@ void preproc_build_firejail_dir_locked(void) {
// only root should be able to lock files in this directory
create_empty_dir_as_root(RUN_FIREJAIL_SANDBOX_DIR, 0700);

#ifdef HAVE_DBUSPROXY
create_empty_dir_as_root(RUN_FIREJAIL_DBUS_DIR, 0755);
fs_remount(RUN_FIREJAIL_DBUS_DIR, MOUNT_NOEXEC, 0);
#endif

create_empty_dir_as_root(RUN_RO_DIR, S_IRUSR);
fs_remount(RUN_RO_DIR, MOUNT_READONLY, 0);
Expand Down

0 comments on commit b5d4ea3

Please sign in to comment.