0.9.48 testing

RELNOTES

@@ -1,5 +1,4 @@
-firejail (0.9.47) baseline; urgency=low
- * work in progress
+firejail (0.9.48) baseline; urgency=low
  * modifs: whitelisted Transmission, Deluge, qBitTorrent, KTorrent;
  please use ~/Downloads directory for saving files
  * modifs: AppArmor made optional; a warning is printed on the screen
@@ -10,7 +9,7 @@ firejail (0.9.47) baseline; urgency=low
  * feature: profile support in overlayfs mode
  * new profiles: vym, darktable, Waterfox, digiKam, Catfish, HandBrake
  * bugfixes
- -- netblue30 <[email protected]> Tue, 23 May 2017 08:00:00 -0500
+ -- netblue30 <[email protected]> Mon, 12 Jun 2017 08:00:00 -0500
 
 firejail (0.9.46) baseline; urgency=low
  * security: split most of networking code in a separate executable

configure

@@ -1,6 +1,6 @@
 #! /bin/sh
 # Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.69 for firejail 0.9.47.
+# Generated by GNU Autoconf 2.69 for firejail 0.9.48.
 #
 # Report bugs to <[email protected]>.
 #
@@ -580,8 +580,8 @@ MAKEFLAGS=
 # Identity of this package.
 PACKAGE_NAME='firejail'
 PACKAGE_TARNAME='firejail'
-PACKAGE_VERSION='0.9.47'
-PACKAGE_STRING='firejail 0.9.47'
+PACKAGE_VERSION='0.9.48'
+PACKAGE_STRING='firejail 0.9.48'
 PACKAGE_BUGREPORT='[email protected]'
 PACKAGE_URL='http:https://firejail.wordpress.com'
 
@@ -1265,7 +1265,7 @@ if test "$ac_init_help" = "long"; then
  # Omit some internal or obsolete options to make the list less imposing.
  # This message is too long to be a string in the A/UX 3.1 sh.
  cat <<_ACEOF
-\`configure' configures firejail 0.9.47 to adapt to many kinds of systems.
+\`configure' configures firejail 0.9.48 to adapt to many kinds of systems.
 
 Usage: $0 [OPTION]... [VAR=VALUE]...
 
@@ -1326,7 +1326,7 @@ fi
 
 if test -n "$ac_init_help"; then
  case $ac_init_help in
- short | recursive ) echo "Configuration of firejail 0.9.47:";;
+ short | recursive ) echo "Configuration of firejail 0.9.48:";;
  esac
  cat <<\_ACEOF
 
@@ -1434,7 +1434,7 @@ fi
 test -n "$ac_init_help" && exit $ac_status
 if $ac_init_version; then
  cat <<\_ACEOF
-firejail configure 0.9.47
+firejail configure 0.9.48
 generated by GNU Autoconf 2.69
 
 Copyright (C) 2012 Free Software Foundation, Inc.
@@ -1736,7 +1736,7 @@ cat >config.log <<_ACEOF
 This file contains any messages produced by compilers while
 running configure, to aid debugging if configure makes a mistake.
 
-It was created by firejail $as_me 0.9.47, which was
+It was created by firejail $as_me 0.9.48, which was
 generated by GNU Autoconf 2.69. Invocation command line was
 
  $ $0 $@
@@ -4355,7 +4355,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 # report actual input values of CONFIG_FILES etc. instead of their
 # values after options handling.
 ac_log="
-This file was extended by firejail $as_me 0.9.47, which was
+This file was extended by firejail $as_me 0.9.48, which was
 generated by GNU Autoconf 2.69. Invocation command line was
 
  CONFIG_FILES = $CONFIG_FILES
@@ -4409,7 +4409,7 @@ _ACEOF
 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
 ac_cs_version="\\
-firejail config.status 0.9.47
+firejail config.status 0.9.48
 configured by $0, generated by GNU Autoconf 2.69,
  with options \\"\$ac_cs_config\\"
 

configure.ac

@@ -1,5 +1,5 @@
 AC_PREREQ([2.68])
-AC_INIT(firejail, 0.9.47, [email protected], , http:https://firejail.wordpress.com)
+AC_INIT(firejail, 0.9.48, [email protected], , http:https://firejail.wordpress.com)
 AC_CONFIG_SRCDIR([src/firejail/main.c])
 #AC_CONFIG_HEADERS([config.h])
 

src/firejail/appimage.c

@@ -31,17 +31,19 @@
 static char *devloop = NULL; // device file
 static char *mntdir = NULL; // mount point in /tmp directory
 
+#ifdef LOOP_CTL_GET_FREE // test for older kernels; this definition is found in /usr/include/linux/loop.h
 static void err_loop(void) {
  fprintf(stderr, "Error: cannot configure loopback device\n");
  exit(1);
 }
+#endif
 
 void appimage_set(const char *appimage) {
  assert(appimage);
  assert(devloop == NULL); // don't call this twice!
  EUID_ASSERT();
 
-#ifdef LOOP_CTL_GET_FREE // test for older kernels; this definition is found in /usr/include/linux/loop.h
+#ifdef LOOP_CTL_GET_FREE
  // check appimage file
  invalid_filename(appimage);
  if (access(appimage, R_OK) == -1) {

src/firejail/fs_dev.c

@@ -52,7 +52,7 @@ static DevEntry dev[] = {
  {"/dev/nvidia7", RUN_DEV_DIR "/nvidia7", 0, 1, 0},
  {"/dev/nvidia8", RUN_DEV_DIR "/nvidia8", 0, 1, 0},
  {"/dev/nvidia9", RUN_DEV_DIR "/nvidia9", 0, 1, 0},
- {"/dev/nvidiactl", RUN_DEV_DIR "/nvidiactl", 0, 1},
+ {"/dev/nvidiactl", RUN_DEV_DIR "/nvidiactl", 0, 1, 0},
  {"/dev/nvidia-modeset", RUN_DEV_DIR "/nvidia-modeset", 0, 1, 0},
  {"/dev/nvidia-uvm", RUN_DEV_DIR "/nvidia-uvm", 0, 1, 0},
  {"/dev/video0", RUN_DEV_DIR "/video0", 0, 0, 1}, // video camera devices

src/firejail/sandbox.c

@@ -989,7 +989,6 @@ int sandbox(void* sandbox_arg) {
  if (app_pid == 0) {
 #ifdef HAVE_APPARMOR
  if (arg_apparmor) {
- int done = 0;
  errno = 0;
  if (aa_change_onexec("firejail-default")) {
  fwarning("Cannot confine the application using AppArmor.\n"