fix nginx and apache2, possible fix for netblue30#1534

onny · Sep 25, 2017 · 94bb788 · 94bb788
1 parent a6341b9
commit 94bb788
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
@@ -120,7 +120,8 @@ blacklist /var/lib/mysql/mysql.sock
 blacklist /var/lib/mysqld/mysql.sock
 blacklist /var/lib/pacman
 blacklist /var/lib/upower
-blacklist /var/log
+# blacklist /var/log - a virtual /var/log directory (mostly empty) is buid up by default for
+# every sandbox, unless --writeble-var-log switch is activated
 blacklist /var/mail
 blacklist /var/opt
 blacklist /var/run/acpid.socket

diff --git a/etc/server.profile b/etc/server.profile
@@ -13,7 +13,6 @@ blacklist /tmp/.X11-unix
 
 noblacklist /sbin
 noblacklist /usr/sbin
-# noblacklist /var/log
 # noblacklist /var/opt
 
 include /etc/firejail/disable-common.inc
@@ -29,6 +28,8 @@ notv
 novideo
 seccomp
 
+# netfilter /etc/firejail/webserver.net
+
 # disable-mnt
 private
 # private-bin program