API tools faq
paste
Guest User

newsboat firejail

a guest
Jan 14th, 2021
53
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 50.05 KB | None | 0 0
raw download clone embed print report
  1. Autoselecting /bin/bash as shell
  2. Building quoted command line: 'newsboat'
  3. Command name #newsboat#
  4. Found newsboat.profile profile in /home/dizzy/.config/firejail directory
  5. Found disable-common.inc profile in /etc/firejail directory
  6. Found disable-devel.inc profile in /etc/firejail directory
  7. Found disable-exec.inc profile in /etc/firejail directory
  8. Found disable-interpreters.inc profile in /etc/firejail directory
  9. Found disable-passwdmgr.inc profile in /etc/firejail directory
  10. Found disable-programs.inc profile in /etc/firejail directory
  11. Found disable-xdg.inc profile in /etc/firejail directory
  12. Found whitelist-common.inc profile in /etc/firejail directory
  13. Found whitelist-runuser-common.inc profile in /etc/firejail directory
  14. Found whitelist-var-common.inc profile in /etc/firejail directory
  15. Enabling IPC namespace
  16. Using the local network stack
  17. Enabling IPC namespace
  18. Using the local network stack
  19. Initializing child process
  20. PID namespace installed
  21. Mounting tmpfs on /run/firejail/mnt directory
  22. Creating empty /run/firejail/mnt/seccomp directory
  23. Creating empty /run/firejail/mnt/seccomp/seccomp.protocol file
  24. Creating empty /run/firejail/mnt/seccomp/seccomp.postexec file
  25. Creating empty /run/firejail/mnt/seccomp/seccomp.postexec32 file
  26. Build protocol filter: inet,inet6
  27. sbox run: /run/firejail/lib/fseccomp protocol build inet,inet6 /run/firejail/mnt/seccomp/seccomp.protocol
  28. Mounting /proc filesystem representing the PID namespace
  29. Basic read-only filesystem:
  30. Mounting read-only /etc
  31. 516 475 254:2 /etc /etc ro,relatime master:1 - ext4 /dev/mapper/vol-root rw
  32. mountid=516 fsname=/etc dir=/etc fstype=ext4
  33. Mounting noexec /etc
  34. 517 516 254:2 /etc /etc ro,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/mapper/vol-root rw
  35. mountid=517 fsname=/etc dir=/etc fstype=ext4
  36. Mounting read-only /var
  37. 518 475 254:2 /var /var ro,relatime master:1 - ext4 /dev/mapper/vol-root rw
  38. mountid=518 fsname=/var dir=/var fstype=ext4
  39. Mounting noexec /var
  40. 519 518 254:2 /var /var ro,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/mapper/vol-root rw
  41. mountid=519 fsname=/var dir=/var fstype=ext4
  42. Mounting read-only /usr
  43. 520 475 254:2 /usr /usr ro,relatime master:1 - ext4 /dev/mapper/vol-root rw
  44. mountid=520 fsname=/usr dir=/usr fstype=ext4
  45. Mounting tmpfs on /var/lock
  46. Mounting tmpfs on /var/tmp
  47. Mounting tmpfs on /var/log
  48. Create the new utmp file
  49. Mount the new utmp file
  50. Cleaning /home directory
  51. Cleaning /run/user directory
  52. Sanitizing /etc/passwd, UID_MIN 1000
  53. Sanitizing /etc/group, GID_MIN 1000
  54. Disable /home/dizzy/.config/firejail
  55. Disable /run/firejail/network
  56. Disable /run/firejail/bandwidth
  57. Disable /run/firejail/name
  58. Disable /run/firejail/profile
  59. Disable /run/firejail/x11
  60. Mounting tmpfs on /dev
  61. mounting /run/firejail/mnt/dev/snd directory
  62. Process /dev/shm directory
  63. Copying files in the new bin directory
  64. Checking /usr/local/bin/newsboat
  65. firejail exec symlink detected
  66. Checking /usr/bin/newsboat
  67. sbox run: /run/firejail/lib/fcopy /usr/bin/newsboat /run/firejail/mnt/bin
  68. Mount-bind /run/firejail/mnt/bin on top of /usr/local/bin
  69. Mount-bind /run/firejail/mnt/bin on top of /usr/bin
  70. Mount-bind /run/firejail/mnt/bin on top of /bin
  71. Mount-bind /run/firejail/mnt/bin on top of /usr/local/games
  72. Mount-bind /run/firejail/mnt/bin on top of /usr/local/sbin
  73. Mount-bind /run/firejail/mnt/bin on top of /usr/sbin
  74. Mount-bind /run/firejail/mnt/bin on top of /sbin
  75. Mounting tmpfs on /home/dizzy/.cache
  76. 562 527 0:67 / /home/dizzy/.cache rw,nosuid,nodev,relatime - tmpfs tmpfs rw,mode=755,uid=1000,gid=1000,inode64
  77. mountid=562 fsname=/ dir=/home/dizzy/.cache fstype=tmpfs
  78. Generate private-tmp whitelist commands
  79. Creating empty /run/firejail/mnt/dbus directory
  80. Creating empty /run/firejail/mnt/dbus/user file
  81. blacklist /run/user/1000/bus
  82. blacklist /home/dizzy/.dbus
  83. Creating empty /run/firejail/mnt/dbus/system file
  84. blacklist /run/dbus/system_bus_socket
  85. blacklist /run/firejail/dbus
  86. Mounting read-only /proc/sys
  87. Remounting /sys directory
  88. Disable /sys/firmware
  89. Disable /sys/hypervisor
  90. Disable /sys/power
  91. Disable /proc/sys/fs/binfmt_misc
  92. Disable /proc/sys/kernel/core_pattern
  93. Disable /proc/sys/kernel/modprobe
  94. Disable /proc/sysrq-trigger
  95. Disable /proc/sys/vm/panic_on_oom
  96. Disable /proc/irq
  97. Disable /proc/bus
  98. Disable /proc/sched_debug
  99. Disable /proc/timer_list
  100. Disable /proc/kallsyms
  101. Disable /usr/lib/modules (requested /lib/modules)
  102. Disable /boot
  103. Disable /run/user/1000/gnupg
  104. Disable /run/user/1000/systemd
  105. Disable /proc/kmsg
  106. Copying files in the new /etc directory:
  107. copying /etc/ca-certificates to private /etc
  108. Creating empty /run/firejail/mnt/etc/ca-certificates directory
  109. sbox run: /run/firejail/lib/fcopy /etc/ca-certificates /run/firejail/mnt/etc/ca-certificates
  110. copying /etc/resolv.conf to private /etc
  111. sbox run: /run/firejail/lib/fcopy /etc/resolv.conf /run/firejail/mnt/etc
  112. copying /etc/ssl to private /etc
  113. Creating empty /run/firejail/mnt/etc/ssl directory
  114. sbox run: /run/firejail/lib/fcopy /etc/ssl /run/firejail/mnt/etc/ssl
  115. Mount-bind /run/firejail/mnt/etc on top of /etc
  116. Copying files in the new /usr/etc directory:
  117. Mount-bind /run/firejail/mnt/usretc on top of /usr/etc
  118. Replaced whitelist path: whitelist /home/dizzy/.config/newsboat
  119. Removed whitelist/nowhitelist path: whitelist ${HOME}/.XCompose
  120. expanded: /home/dizzy/.XCompose
  121. real path: (null)
  122. Removed whitelist/nowhitelist path: whitelist ${HOME}/.asoundrc
  123. expanded: /home/dizzy/.asoundrc
  124. real path: (null)
  125. Replaced whitelist path: whitelist /home/dizzy/.config/ibus
  126. Replaced whitelist path: whitelist /home/dizzy/.config/mimeapps.list
  127. Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/pkcs11
  128. expanded: /home/dizzy/.config/pkcs11
  129. real path: (null)
  130. Replaced whitelist path: whitelist /home/dizzy/.config/user-dirs.dirs
  131. Replaced whitelist path: whitelist /home/dizzy/.config/user-dirs.locale
  132. Removed whitelist/nowhitelist path: whitelist ${HOME}/.drirc
  133. expanded: /home/dizzy/.drirc
  134. real path: (null)
  135. Replaced whitelist path: whitelist /home/dizzy/.icons
  136. Replaced whitelist path: whitelist /home/dizzy/.local/share/applications
  137. Replaced whitelist path: whitelist /home/dizzy/.local/share/icons
  138. Replaced whitelist path: whitelist /home/dizzy/.local/share/mime
  139. Removed whitelist/nowhitelist path: whitelist ${HOME}/.mime.types
  140. expanded: /home/dizzy/.mime.types
  141. real path: (null)
  142. Removed whitelist/nowhitelist path: whitelist ${HOME}/.uim.d
  143. expanded: /home/dizzy/.uim.d
  144. real path: (null)
  145. Replaced whitelist path: whitelist /home/dizzy/.config/dconf
  146. Removed whitelist/nowhitelist path: whitelist ${HOME}/.cache/fontconfig
  147. expanded: /home/dizzy/.cache/fontconfig
  148. real path: (null)
  149. Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/fontconfig
  150. expanded: /home/dizzy/.config/fontconfig
  151. real path: (null)
  152. Removed whitelist/nowhitelist path: whitelist ${HOME}/.fontconfig
  153. expanded: /home/dizzy/.fontconfig
  154. real path: (null)
  155. Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts
  156. expanded: /home/dizzy/.fonts
  157. real path: (null)
  158. Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts.conf
  159. expanded: /home/dizzy/.fonts.conf
  160. real path: (null)
  161. Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts.conf.d
  162. expanded: /home/dizzy/.fonts.conf.d
  163. real path: (null)
  164. Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts.d
  165. expanded: /home/dizzy/.fonts.d
  166. real path: (null)
  167. Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/fonts
  168. expanded: /home/dizzy/.local/share/fonts
  169. real path: (null)
  170. Removed whitelist/nowhitelist path: whitelist ${HOME}/.pangorc
  171. expanded: /home/dizzy/.pangorc
  172. real path: (null)
  173. Replaced whitelist path: whitelist /home/dizzy/.config/gtk-2.0
  174. Replaced whitelist path: whitelist /home/dizzy/.config/gtk-3.0
  175. Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/gtk-4.0
  176. expanded: /home/dizzy/.config/gtk-4.0
  177. real path: (null)
  178. Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/gtkrc
  179. expanded: /home/dizzy/.config/gtkrc
  180. real path: (null)
  181. Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/gtkrc-2.0
  182. expanded: /home/dizzy/.config/gtkrc-2.0
  183. real path: (null)
  184. Removed whitelist/nowhitelist path: whitelist ${HOME}/.gnome2
  185. expanded: /home/dizzy/.gnome2
  186. real path: (null)
  187. Removed whitelist/nowhitelist path: whitelist ${HOME}/.gnome2-private
  188. expanded: /home/dizzy/.gnome2-private
  189. real path: (null)
  190. Removed whitelist/nowhitelist path: whitelist ${HOME}/.gtk-2.0
  191. expanded: /home/dizzy/.gtk-2.0
  192. real path: (null)
  193. Removed whitelist/nowhitelist path: whitelist ${HOME}/.gtkrc
  194. expanded: /home/dizzy/.gtkrc
  195. real path: (null)
  196. Removed whitelist/nowhitelist path: whitelist ${HOME}/.gtkrc-2.0
  197. expanded: /home/dizzy/.gtkrc-2.0
  198. real path: (null)
  199. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/gtkrc
  200. expanded: /home/dizzy/.kde/share/config/gtkrc
  201. real path: (null)
  202. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/gtkrc-2.0
  203. expanded: /home/dizzy/.kde/share/config/gtkrc-2.0
  204. real path: (null)
  205. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/gtkrc
  206. expanded: /home/dizzy/.kde4/share/config/gtkrc
  207. real path: (null)
  208. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/gtkrc-2.0
  209. expanded: /home/dizzy/.kde4/share/config/gtkrc-2.0
  210. real path: (null)
  211. Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/themes
  212. expanded: /home/dizzy/.local/share/themes
  213. real path: (null)
  214. Removed whitelist/nowhitelist path: whitelist ${HOME}/.themes
  215. expanded: /home/dizzy/.themes
  216. real path: (null)
  217. Removed whitelist/nowhitelist path: whitelist ${HOME}/.cache/kioexec/krun
  218. expanded: /home/dizzy/.cache/kioexec/krun
  219. real path: (null)
  220. Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/Kvantum
  221. expanded: /home/dizzy/.config/Kvantum
  222. real path: (null)
  223. Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/Trolltech.conf
  224. expanded: /home/dizzy/.config/Trolltech.conf
  225. real path: (null)
  226. Replaced whitelist path: whitelist /home/dizzy/.config/kdeglobals
  227. Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/kio_httprc
  228. expanded: /home/dizzy/.config/kio_httprc
  229. real path: (null)
  230. Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/kioslaverc
  231. expanded: /home/dizzy/.config/kioslaverc
  232. real path: (null)
  233. Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/ksslcablacklist
  234. expanded: /home/dizzy/.config/ksslcablacklist
  235. real path: (null)
  236. Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/qt5ct
  237. expanded: /home/dizzy/.config/qt5ct
  238. real path: (null)
  239. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/kdeglobals
  240. expanded: /home/dizzy/.kde/share/config/kdeglobals
  241. real path: (null)
  242. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/kio_httprc
  243. expanded: /home/dizzy/.kde/share/config/kio_httprc
  244. real path: (null)
  245. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/kioslaverc
  246. expanded: /home/dizzy/.kde/share/config/kioslaverc
  247. real path: (null)
  248. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/ksslcablacklist
  249. expanded: /home/dizzy/.kde/share/config/ksslcablacklist
  250. real path: (null)
  251. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/oxygenrc
  252. expanded: /home/dizzy/.kde/share/config/oxygenrc
  253. real path: (null)
  254. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/icons
  255. expanded: /home/dizzy/.kde/share/icons
  256. real path: (null)
  257. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/kdeglobals
  258. expanded: /home/dizzy/.kde4/share/config/kdeglobals
  259. real path: (null)
  260. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/kio_httprc
  261. expanded: /home/dizzy/.kde4/share/config/kio_httprc
  262. real path: (null)
  263. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/kioslaverc
  264. expanded: /home/dizzy/.kde4/share/config/kioslaverc
  265. real path: (null)
  266. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/ksslcablacklist
  267. expanded: /home/dizzy/.kde4/share/config/ksslcablacklist
  268. real path: (null)
  269. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/oxygenrc
  270. expanded: /home/dizzy/.kde4/share/config/oxygenrc
  271. real path: (null)
  272. Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/icons
  273. expanded: /home/dizzy/.kde4/share/icons
  274. real path: (null)
  275. Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/qt5ct
  276. expanded: /home/dizzy/.local/share/qt5ct
  277. real path: (null)
  278. Replaced whitelist path: whitelist /run/user/1000/bus
  279. Replaced whitelist path: whitelist /run/user/1000/dconf
  280. Removed whitelist/nowhitelist path: whitelist ${RUNUSER}/gdm/Xauthority
  281. expanded: /run/user/1000/gdm/Xauthority
  282. real path: (null)
  283. Removed whitelist/nowhitelist path: whitelist ${RUNUSER}/ICEauthority
  284. expanded: /run/user/1000/ICEauthority
  285. real path: (null)
  286. Removed whitelist/nowhitelist path: whitelist ${RUNUSER}/.mutter-Xwaylandauth.*
  287. expanded: /run/user/1000/.mutter-Xwaylandauth.*
  288. real path: (null)
  289. Replaced whitelist path: whitelist /run/user/1000/pulse/native
  290. Removed whitelist/nowhitelist path: whitelist ${RUNUSER}/wayland-0
  291. expanded: /run/user/1000/wayland-0
  292. real path: (null)
  293. Removed whitelist/nowhitelist path: whitelist /var/lib/ca-certificates
  294. expanded: /var/lib/ca-certificates
  295. real path: (null)
  296. Removed whitelist/nowhitelist path: whitelist /var/lib/menu-xdg
  297. expanded: /var/lib/menu-xdg
  298. real path: (null)
  299. Removed whitelist/nowhitelist path: whitelist /var/lib/uim
  300. expanded: /var/lib/uim
  301. real path: (null)
  302. Replaced whitelist path: whitelist /run
  303. Replaced whitelist path: whitelist /run/lock
  304. Mounting tmpfs on /tmp directory
  305. Mounting tmpfs on /var directory
  306. Mounting tmpfs on /run/user/1000 directory
  307. Mounting a new /root directory
  308. Mounting a new /home directory
  309. Create a new user directory
  310. Whitelisting /home/dizzy/.config/newsboat
  311. 587 586 254:3 /dizzy/.config/newsboat /home/dizzy/.config/newsboat rw,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  312. mountid=587 fsname=/dizzy/.config/newsboat dir=/home/dizzy/.config/newsboat fstype=ext4
  313. Whitelisting /home/dizzy/.config/ibus
  314. 588 586 254:3 /dizzy/.config/ibus /home/dizzy/.config/ibus rw,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  315. mountid=588 fsname=/dizzy/.config/ibus dir=/home/dizzy/.config/ibus fstype=ext4
  316. Whitelisting /home/dizzy/.config/mimeapps.list
  317. 589 586 254:3 /dizzy/.config/mimeapps.list /home/dizzy/.config/mimeapps.list rw,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  318. mountid=589 fsname=/dizzy/.config/mimeapps.list dir=/home/dizzy/.config/mimeapps.list fstype=ext4
  319. Whitelisting /home/dizzy/.config/user-dirs.dirs
  320. 590 586 254:3 /dizzy/.config/user-dirs.dirs /home/dizzy/.config/user-dirs.dirs rw,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  321. mountid=590 fsname=/dizzy/.config/user-dirs.dirs dir=/home/dizzy/.config/user-dirs.dirs fstype=ext4
  322. Whitelisting /home/dizzy/.config/user-dirs.locale
  323. 591 586 254:3 /dizzy/.config/user-dirs.locale /home/dizzy/.config/user-dirs.locale rw,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  324. mountid=591 fsname=/dizzy/.config/user-dirs.locale dir=/home/dizzy/.config/user-dirs.locale fstype=ext4
  325. Whitelisting /home/dizzy/.icons
  326. 592 586 254:3 /dizzy/.icons /home/dizzy/.icons rw,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  327. mountid=592 fsname=/dizzy/.icons dir=/home/dizzy/.icons fstype=ext4
  328. Whitelisting /home/dizzy/.local/share/applications
  329. 593 586 254:3 /dizzy/.local/share/applications /home/dizzy/.local/share/applications rw,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  330. mountid=593 fsname=/dizzy/.local/share/applications dir=/home/dizzy/.local/share/applications fstype=ext4
  331. Whitelisting /home/dizzy/.local/share/icons
  332. 594 586 254:3 /dizzy/.local/share/icons /home/dizzy/.local/share/icons rw,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  333. mountid=594 fsname=/dizzy/.local/share/icons dir=/home/dizzy/.local/share/icons fstype=ext4
  334. Whitelisting /home/dizzy/.local/share/mime
  335. 595 586 254:3 /dizzy/.local/share/mime /home/dizzy/.local/share/mime rw,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  336. mountid=595 fsname=/dizzy/.local/share/mime dir=/home/dizzy/.local/share/mime fstype=ext4
  337. Whitelisting /home/dizzy/.config/dconf
  338. 596 586 254:3 /dizzy/.config/dconf /home/dizzy/.config/dconf rw,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  339. mountid=596 fsname=/dizzy/.config/dconf dir=/home/dizzy/.config/dconf fstype=ext4
  340. Whitelisting /home/dizzy/.config/gtk-2.0
  341. 597 586 254:3 /dizzy/.config/gtk-2.0 /home/dizzy/.config/gtk-2.0 rw,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  342. mountid=597 fsname=/dizzy/.config/gtk-2.0 dir=/home/dizzy/.config/gtk-2.0 fstype=ext4
  343. Whitelisting /home/dizzy/.config/gtk-3.0
  344. 598 586 254:3 /dizzy/.config/gtk-3.0 /home/dizzy/.config/gtk-3.0 rw,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  345. mountid=598 fsname=/dizzy/.config/gtk-3.0 dir=/home/dizzy/.config/gtk-3.0 fstype=ext4
  346. Whitelisting /home/dizzy/.config/kdeglobals
  347. 599 586 254:3 /dizzy/.config/kdeglobals /home/dizzy/.config/kdeglobals rw,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  348. mountid=599 fsname=/dizzy/.config/kdeglobals dir=/home/dizzy/.config/kdeglobals fstype=ext4
  349. Whitelisting /run/user/1000/bus
  350. 600 580 0:21 /firejail/firejail.ro.file /run/user/1000/bus rw,nosuid,nodev,relatime master:14 - tmpfs run rw,mode=755,inode64
  351. mountid=600 fsname=/firejail/firejail.ro.file dir=/run/user/1000/bus fstype=tmpfs
  352. Whitelisting /run/user/1000/dconf
  353. 601 580 0:54 /dconf /run/user/1000/dconf rw,nosuid,nodev,relatime master:255 - tmpfs tmpfs rw,size=803568k,nr_inodes=200892,mode=700,uid=1000,gid=1000,inode64
  354. mountid=601 fsname=/dconf dir=/run/user/1000/dconf fstype=tmpfs
  355. Whitelisting /run/user/1000/pulse/native
  356. 602 580 0:54 /pulse/native /run/user/1000/pulse/native rw,nosuid,nodev,relatime master:255 - tmpfs tmpfs rw,size=803568k,nr_inodes=200892,mode=700,uid=1000,gid=1000,inode64
  357. mountid=602 fsname=/pulse/native dir=/run/user/1000/pulse/native fstype=tmpfs
  358. Whitelisting /var/lib/dbus
  359. 603 574 254:2 /var/lib/dbus /var/lib/dbus ro,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/mapper/vol-root rw
  360. mountid=603 fsname=/var/lib/dbus dir=/var/lib/dbus fstype=ext4
  361. Whitelisting /var/cache/fontconfig
  362. 604 574 254:2 /var/cache/fontconfig /var/cache/fontconfig ro,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/mapper/vol-root rw
  363. mountid=604 fsname=/var/cache/fontconfig dir=/var/cache/fontconfig fstype=ext4
  364. Whitelisting /var/tmp
  365. 605 574 0:59 / /var/tmp rw,nosuid,nodev,noexec - tmpfs tmpfs rw,inode64
  366. mountid=605 fsname=/ dir=/var/tmp fstype=tmpfs
  367. Created symbolic link /var/run -> /run
  368. Created symbolic link /var/lock -> /run/lock
  369. Whitelisting /tmp/.X11-unix
  370. 606 570 0:48 /.X11-unix /tmp/.X11-unix rw,nosuid,nodev master:66 - tmpfs tmpfs rw,nr_inodes=409600,inode64
  371. mountid=606 fsname=/.X11-unix dir=/tmp/.X11-unix fstype=tmpfs
  372. Mounting read-only /home/dizzy/.config/kdeglobals
  373. 611 599 254:3 /dizzy/.config/kdeglobals /home/dizzy/.config/kdeglobals ro,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  374. mountid=611 fsname=/dizzy/.config/kdeglobals dir=/home/dizzy/.config/kdeglobals fstype=ext4
  375. Mounting read-only /home/dizzy/.config/dconf
  376. 612 596 254:3 /dizzy/.config/dconf /home/dizzy/.config/dconf ro,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  377. mountid=612 fsname=/dizzy/.config/dconf dir=/home/dizzy/.config/dconf fstype=ext4
  378. Mounting read-only /home/dizzy/.local/share/applications
  379. 613 593 254:3 /dizzy/.local/share/applications /home/dizzy/.local/share/applications ro,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  380. mountid=613 fsname=/dizzy/.local/share/applications dir=/home/dizzy/.local/share/applications fstype=ext4
  381. Mounting read-only /home/dizzy/.config/mimeapps.list
  382. 614 589 254:3 /dizzy/.config/mimeapps.list /home/dizzy/.config/mimeapps.list ro,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  383. mountid=614 fsname=/dizzy/.config/mimeapps.list dir=/home/dizzy/.config/mimeapps.list fstype=ext4
  384. Mounting read-only /home/dizzy/.config/user-dirs.dirs
  385. 615 590 254:3 /dizzy/.config/user-dirs.dirs /home/dizzy/.config/user-dirs.dirs ro,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  386. mountid=615 fsname=/dizzy/.config/user-dirs.dirs dir=/home/dizzy/.config/user-dirs.dirs fstype=ext4
  387. Mounting read-only /home/dizzy/.config/user-dirs.locale
  388. 616 591 254:3 /dizzy/.config/user-dirs.locale /home/dizzy/.config/user-dirs.locale ro,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  389. mountid=616 fsname=/dizzy/.config/user-dirs.locale dir=/home/dizzy/.config/user-dirs.locale fstype=ext4
  390. Mounting read-only /home/dizzy/.local/share/mime
  391. 617 595 254:3 /dizzy/.local/share/mime /home/dizzy/.local/share/mime ro,nosuid,nodev,relatime master:68 - ext4 /dev/mapper/vol-home rw
  392. mountid=617 fsname=/dizzy/.local/share/mime dir=/home/dizzy/.local/share/mime fstype=ext4
  393. Disable /usr/local/sbin
  394. Disable /proc/config.gz
  395. Disable /usr/share/java
  396. Disable /usr/src
  397. Disable /usr/local/src
  398. Disable /usr/include
  399. Disable /usr/local/include
  400. Mounting noexec /home/dizzy/.config/newsboat
  401. 625 587 254:3 /dizzy/.config/newsboat /home/dizzy/.config/newsboat rw,nosuid,nodev,noexec,relatime master:68 - ext4 /dev/mapper/vol-home rw
  402. mountid=625 fsname=/dizzy/.config/newsboat dir=/home/dizzy/.config/newsboat fstype=ext4
  403. Mounting noexec /home/dizzy/.config/ibus
  404. 626 588 254:3 /dizzy/.config/ibus /home/dizzy/.config/ibus rw,nosuid,nodev,noexec,relatime master:68 - ext4 /dev/mapper/vol-home rw
  405. mountid=626 fsname=/dizzy/.config/ibus dir=/home/dizzy/.config/ibus fstype=ext4
  406. Mounting noexec /home/dizzy/.config/mimeapps.list
  407. 627 614 254:3 /dizzy/.config/mimeapps.list /home/dizzy/.config/mimeapps.list ro,nosuid,nodev,noexec,relatime master:68 - ext4 /dev/mapper/vol-home rw
  408. mountid=627 fsname=/dizzy/.config/mimeapps.list dir=/home/dizzy/.config/mimeapps.list fstype=ext4
  409. Mounting noexec /home/dizzy/.config/user-dirs.dirs
  410. 628 615 254:3 /dizzy/.config/user-dirs.dirs /home/dizzy/.config/user-dirs.dirs ro,nosuid,nodev,noexec,relatime master:68 - ext4 /dev/mapper/vol-home rw
  411. mountid=628 fsname=/dizzy/.config/user-dirs.dirs dir=/home/dizzy/.config/user-dirs.dirs fstype=ext4
  412. Mounting noexec /home/dizzy/.config/user-dirs.locale
  413. 629 616 254:3 /dizzy/.config/user-dirs.locale /home/dizzy/.config/user-dirs.locale ro,nosuid,nodev,noexec,relatime master:68 - ext4 /dev/mapper/vol-home rw
  414. mountid=629 fsname=/dizzy/.config/user-dirs.locale dir=/home/dizzy/.config/user-dirs.locale fstype=ext4
  415. Mounting noexec /home/dizzy/.icons
  416. 630 592 254:3 /dizzy/.icons /home/dizzy/.icons rw,nosuid,nodev,noexec,relatime master:68 - ext4 /dev/mapper/vol-home rw
  417. mountid=630 fsname=/dizzy/.icons dir=/home/dizzy/.icons fstype=ext4
  418. Mounting noexec /home/dizzy/.local/share/applications
  419. 631 613 254:3 /dizzy/.local/share/applications /home/dizzy/.local/share/applications ro,nosuid,nodev,noexec,relatime master:68 - ext4 /dev/mapper/vol-home rw
  420. mountid=631 fsname=/dizzy/.local/share/applications dir=/home/dizzy/.local/share/applications fstype=ext4
  421. Mounting noexec /home/dizzy/.local/share/icons
  422. 632 594 254:3 /dizzy/.local/share/icons /home/dizzy/.local/share/icons rw,nosuid,nodev,noexec,relatime master:68 - ext4 /dev/mapper/vol-home rw
  423. mountid=632 fsname=/dizzy/.local/share/icons dir=/home/dizzy/.local/share/icons fstype=ext4
  424. Mounting noexec /home/dizzy/.local/share/mime
  425. 633 617 254:3 /dizzy/.local/share/mime /home/dizzy/.local/share/mime ro,nosuid,nodev,noexec,relatime master:68 - ext4 /dev/mapper/vol-home rw
  426. mountid=633 fsname=/dizzy/.local/share/mime dir=/home/dizzy/.local/share/mime fstype=ext4
  427. Mounting noexec /home/dizzy/.config/dconf
  428. 634 612 254:3 /dizzy/.config/dconf /home/dizzy/.config/dconf ro,nosuid,nodev,noexec,relatime master:68 - ext4 /dev/mapper/vol-home rw
  429. mountid=634 fsname=/dizzy/.config/dconf dir=/home/dizzy/.config/dconf fstype=ext4
  430. Mounting noexec /home/dizzy/.config/gtk-2.0
  431. 635 597 254:3 /dizzy/.config/gtk-2.0 /home/dizzy/.config/gtk-2.0 rw,nosuid,nodev,noexec,relatime master:68 - ext4 /dev/mapper/vol-home rw
  432. mountid=635 fsname=/dizzy/.config/gtk-2.0 dir=/home/dizzy/.config/gtk-2.0 fstype=ext4
  433. Mounting noexec /home/dizzy/.config/gtk-3.0
  434. 636 598 254:3 /dizzy/.config/gtk-3.0 /home/dizzy/.config/gtk-3.0 rw,nosuid,nodev,noexec,relatime master:68 - ext4 /dev/mapper/vol-home rw
  435. mountid=636 fsname=/dizzy/.config/gtk-3.0 dir=/home/dizzy/.config/gtk-3.0 fstype=ext4
  436. Mounting noexec /home/dizzy/.config/kdeglobals
  437. 637 611 254:3 /dizzy/.config/kdeglobals /home/dizzy/.config/kdeglobals ro,nosuid,nodev,noexec,relatime master:68 - ext4 /dev/mapper/vol-home rw
  438. mountid=637 fsname=/dizzy/.config/kdeglobals dir=/home/dizzy/.config/kdeglobals fstype=ext4
  439. Mounting noexec /run/user/1000
  440. 641 638 0:54 /pulse/native /run/user/1000/pulse/native rw,nosuid,nodev,relatime master:255 - tmpfs tmpfs rw,size=803568k,nr_inodes=200892,mode=700,uid=1000,gid=1000,inode64
  441. mountid=641 fsname=/pulse/native dir=/run/user/1000/pulse/native fstype=tmpfs
  442. Mounting noexec /run/user/1000/dconf
  443. 642 640 0:54 /dconf /run/user/1000/dconf rw,nosuid,nodev,noexec,relatime master:255 - tmpfs tmpfs rw,size=803568k,nr_inodes=200892,mode=700,uid=1000,gid=1000,inode64
  444. mountid=642 fsname=/dconf dir=/run/user/1000/dconf fstype=tmpfs
  445. Mounting noexec /run/user/1000/pulse/native
  446. 643 641 0:54 /pulse/native /run/user/1000/pulse/native rw,nosuid,nodev,noexec,relatime master:255 - tmpfs tmpfs rw,size=803568k,nr_inodes=200892,mode=700,uid=1000,gid=1000,inode64
  447. mountid=643 fsname=/pulse/native dir=/run/user/1000/pulse/native fstype=tmpfs
  448. Mounting noexec /dev/shm
  449. 644 549 0:65 /shm /dev/shm rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755,inode64
  450. mountid=644 fsname=/shm dir=/dev/shm fstype=tmpfs
  451. Mounting noexec /tmp
  452. 646 645 0:48 /.X11-unix line OP JT JF K
  453. =================================
  454. 0000: 20 00 00 00000004 ld data.architecture
  455. 0001: 15 04 00 c000003e jeq ARCH_64 0006 (false 0002)
  456. 0002: 20 00 00 00000000 ld data.syscall-number
  457. 0003: 15 01 00 00000167 jeq unknown 0005 (false 0004)
  458. 0004: 06 00 00 7fff0000 ret ALLOW
  459. 0005: 05 00 00 00000006 jmp 000c
  460. 0006: 20 00 00 00000004 ld data.architecture
  461. 0007: 15 01 00 c000003e jeq ARCH_64 0009 (false 0008)
  462. 0008: 06 00 00 7fff0000 ret ALLOW
  463. 0009: 20 00 00 00000000 ld data.syscall-number
  464. 000a: 15 01 00 00000029 jeq socket 000c (false 000b)
  465. 000b: 06 00 00 7fff0000 ret ALLOW
  466. 000c: 20 00 00 00000010 ld data.args[0]
  467. 000d: 15 00 01 00000002 jeq 2 000e (false 000f)
  468. 000e: 06 00 00 7fff0000 ret ALLOW
  469. 000f: 15 00 01 0000000a jeq a 0010 (false 0011)
  470. 0010: 06 00 00 7fff0000 ret ALLOW
  471. 0011: 06 00 00 0005005f ret ERRNO(95)
  472. line OP JT JF K
  473. =================================
  474. 0000: 20 00 00 00000004 ld data.architecture
  475. 0001: 15 01 00 40000003 jeq ARCH_32 0003 (false 0002)
  476. 0002: 06 00 00 7fff0000 ret ALLOW
  477. 0003: 20 00 00 00000000 ld data.syscall-number
  478. 0004: 15 00 01 00000015 jeq 15 0005 (false 0006)
  479. 0005: 06 00 00 00000001 ret KILL
  480. 0006: 15 00 01 00000034 jeq 34 0007 (false 0008)
  481. 0007: 06 00 00 00000001 ret KILL
  482. 0008: 15 00 01 0000001a jeq 1a 0009 (false 000a)
  483. 0009: 06 00 00 00000001 ret KILL
  484. 000a: 15 00 01 0000011b jeq 11b 000b (false 000c)
  485. 000b: 06 00 00 00000001 ret KILL
  486. 000c: 15 00 01 00000155 jeq 155 000d (false 000e)
  487. 000d: 06 00 00 00000001 ret KILL
  488. 000e: 15 00 01 00000156 jeq 156 000f (false 0010)
  489. 000f: 06 00 00 00000001 ret KILL
  490. 0010: 15 00 01 0000007f jeq 7f 0011 (false 0012)
  491. 0011: 06 00 00 00000001 ret KILL
  492. 0012: 15 00 01 00000080 jeq 80 0013 (false 0014)
  493. 0013: 06 00 00 00000001 ret KILL
  494. 0014: 15 00 01 0000015e jeq 15e 0015 (false 0016)
  495. 0015: 06 00 00 00000001 ret KILL
  496. 0016: 15 00 01 00000081 jeq 81 0017 (false 0018)
  497. 0017: 06 00 00 00000001 ret KILL
  498. 0018: 15 00 01 0000006e jeq 6e 0019 (false 001a)
  499. 0019: 06 00 00 00000001 ret KILL
  500. 001a: 15 00 01 00000065 jeq 65 001b (false 001c)
  501. 001b: 06 00 00 00000001 ret KILL
  502. 001c: 15 00 01 00000121 jeq 121 001d (false 001e)
  503. 001d: 06 00 00 00000001 ret KILL
  504. 001e: 15 00 01 00000057 jeq 57 001f (false 0020)
  505. 001f: 06 00 00 00000001 ret KILL
  506. 0020: 15 00 01 00000073 jeq 73 0021 (false 0022)
  507. 0021: 06 00 00 00000001 ret KILL
  508. 0022: 15 00 01 00000067 jeq 67 0023 (false 0024)
  509. 0023: 06 00 00 00000001 ret KILL
  510. 0024: 15 00 01 0000015b jeq 15b 0025 (false 0026)
  511. 0025: 06 00 00 00000001 ret KILL
  512. 0026: 15 00 01 0000015c jeq 15c 0027 (false 0028)
  513. 0027: 06 00 00 00000001 ret KILL
  514. 0028: 15 00 01 00000087 jeq 87 0029 (false 002a)
  515. 0029: 06 00 00 00000001 ret KILL
  516. 002a: 15 00 01 00000095 jeq 95 002b (false 002c)
  517. 002b: 06 00 00 00000001 ret KILL
  518. 002c: 15 00 01 0000007c jeq 7c 002d (false 002e)
  519. 002d: 06 00 00 00000001 ret KILL
  520. 002e: 15 00 01 00000157 jeq 157 002f (false 0030)
  521. 002f: 06 00 00 00000001 ret KILL
  522. 0030: 15 00 01 000000fd jeq fd 0031 (false 0032)
  523. 0031: 06 00 00 00000001 ret KILL
  524. 0032: 15 00 01 00000150 jeq 150 0033 (false 0034)
  525. 0033: 06 00 00 00000001 ret KILL
  526. 0034: 15 00 01 00000152 jeq 152 0035 (false 0036)
  527. 0035: 06 00 00 00000001 ret KILL
  528. 0036: 15 00 01 0000015d jeq 15d 0037 (false 0038)
  529. 0037: 06 00 00 00000001 ret KILL
  530. 0038: 15 00 01 0000011e jeq 11e 0039 (false 003a)
  531. 0039: 06 00 00 00000001 ret KILL
  532. 003a: 15 00 01 0000011f jeq 11f 003b (false 003c)
  533. 003b: 06 00 00 00000001 ret KILL
  534. 003c: 15 00 01 00000120 jeq 120 003d (false 003e)
  535. 003d: 06 00 00 00000001 ret KILL
  536. 003e: 15 00 01 00000056 jeq 56 003f (false 0040)
  537. 003f: 06 00 00 00000001 ret KILL
  538. 0040: 15 00 01 00000033 jeq 33 0041 (false 0042)
  539. 0041: 06 00 00 00000001 ret KILL
  540. 0042: 15 00 01 0000007b jeq 7b 0043 (false 0044)
  541. 0043: 06 00 00 00000001 ret KILL
  542. 0044: 15 00 01 000000d9 jeq d9 0045 (false 0046)
  543. 0045: 06 00 00 00000001 ret KILL
  544. 0046: 15 00 01 000000f5 jeq f5 0047 (false 0048)
  545. 0047: 06 00 00 00000001 ret KILL
  546. 0048: 15 00 01 000000f6 jeq f6 0049 (false 004a)
  547. 0049: 06 00 00 00000001 ret KILL
  548. 004a: 15 00 01 000000f7 jeq f7 004b (false 004c)
  549. 004b: 06 00 00 00000001 ret KILL
  550. 004c: 15 00 01 000000f8 jeq f8 004d (false 004e)
  551. 004d: 06 00 00 00000001 ret KILL
  552. 004e: 15 00 01 000000f9 jeq f9 004f (false 0050)
  553. 004f: 06 00 00 00000001 ret KILL
  554. 0050: 15 00 01 00000101 jeq 101 0051 (false 0052)
  555. 0051: 06 00 00 00000001 ret KILL
  556. 0052: 15 00 01 00000112 jeq 112 0053 (false 0054)
  557. 0053: 06 00 00 00000001 ret KILL
  558. 0054: 15 00 01 00000114 jeq 114 0055 (false 0056)
  559. 0055: 06 00 00 00000001 ret KILL
  560. 0056: 15 00 01 00000126 jeq 126 0057 (false 0058)
  561. 0057: 06 00 00 00000001 ret KILL
  562. 0058: 15 00 01 0000013d jeq 13d 0059 (false 005a)
  563. 0059: 06 00 00 00000001 ret KILL
  564. 005a: 15 00 01 0000013c jeq 13c 005b (false 005c)
  565. 005b: 06 00 00 00000001 ret KILL
  566. 005c: 15 00 01 0000003d jeq 3d 005d (false 005e)
  567. 005d: 06 00 00 00000001 ret KILL
  568. 005e: 15 00 01 00000058 jeq 58 005f (false 0060)
  569. 005f: 06 00 00 00000001 ret KILL
  570. 0060: 15 00 01 000000a9 jeq a9 0061 (false 0062)
  571. 0061: 06 00 00 00000001 ret KILL
  572. 0062: 15 00 01 00000082 jeq 82 0063 (false 0064)
  573. 0063: 06 00 00 00000001 ret KILL
  574. 0064: 06 00 00 7fff0000 ret ALLOW
  575. line OP JT JF K
  576. =================================
  577. 0000: 20 00 00 00000004 ld data.architecture
  578. 0001: 15 01 00 c000003e jeq ARCH_64 0003 (false 0002)
  579. 0002: 06 00 00 7fff0000 ret ALLOW
  580. 0003: 20 00 00 00000000 ld data.syscall-number
  581. 0004: 35 01 00 40000000 jge X32_ABI 0006 (false 0005)
  582. 0005: 35 01 00 00000000 jge read 0007 (false 0006)
  583. 0006: 06 00 00 00050001 ret ERRNO(1)
  584. 0007: 15 00 01 0000009f jeq adjtimex 0008 (false 0009)
  585. 0008: 06 00 00 00000001 ret KILL
  586. 0009: 15 00 01 00000131 jeq clock_adjtime 000a (false 000b)
  587. 000a: 06 00 00 00000001 ret KILL
  588. 000b: 15 00 01 000000e3 jeq clock_settime 000c (false 000d)
  589. 000c: 06 00 00 00000001 ret KILL
  590. 000d: 15 00 01 000000a4 jeq settimeofday 000e (false 000f)
  591. 000e: 06 00 00 00000001 ret KILL
  592. 000f: 15 00 01 0000009a jeq modify_ldt 0010 (false 0011)
  593. 0010: 06 00 00 00000001 ret KILL
  594. 0011: 15 00 01 000000d4 jeq lookup_dcookie 0012 (false 0013)
  595. 0012: 06 00 00 00000001 ret KILL
  596. 0013: 15 00 01 0000012a jeq perf_event_open 0014 (false 0015)
  597. 0014: 06 00 00 00000001 ret KILL
  598. 0015: 15 00 01 00000137 jeq process_vm_writev 0016 (false 0017)
  599. 0016: 06 00 00 00000001 ret KILL
  600. 0017: 15 00 01 000000b0 jeq delete_module 0018 (false 0019)
  601. 0018: 06 00 00 00000001 ret KILL
  602. 0019: 15 00 01 00000139 jeq finit_module 001a (false 001b)
  603. 001a: 06 00 00 00000001 ret KILL
  604. 001b: 15 00 01 000000af jeq init_module 001c (false 001d)
  605. 001c: 06 00 00 00000001 ret KILL
  606. 001d: 15 00 01 000000a1 jeq chroot 001e (false 001f)
  607. 001e: 06 00 00 00000001 ret KILL
  608. 001f: 15 00 01 000000a5 jeq mount 0020 (false 0021)
  609. 0020: 06 00 00 00000001 ret KILL
  610. 0021: 15 00 01 0000009b jeq pivot_root 0022 (false 0023)
  611. 0022: 06 00 00 00000001 ret KILL
  612. 0023: 15 00 01 000000a6 jeq umount2 0024 (false 0025)
  613. 0024: 06 00 00 00000001 ret KILL
  614. 0025: 15 00 01 0000009c jeq _sysctl 0026 (false 0027)
  615. 0026: 06 00 00 00000001 ret KILL
  616. 0027: 15 00 01 000000b7 jeq afs_syscall 0028 (false 0029)
  617. 0028: 06 00 00 00000001 ret KILL
  618. 0029: 15 00 01 000000ae jeq create_module 002a (false 002b)
  619. 002a: 06 00 00 00000001 ret KILL
  620. 002b: 15 00 01 000000b1 jeq get_kernel_syms 002c (false 002d)
  621. 002c: 06 00 00 00000001 ret KILL
  622. 002d: 15 00 01 000000b5 jeq getpmsg 002e (false 002f)
  623. 002e: 06 00 00 00000001 ret KILL
  624. 002f: 15 00 01 000000b6 jeq putpmsg 0030 (false 0031)
  625. 0030: 06 00 00 00000001 ret KILL
  626. 0031: 15 00 01 000000b2 jeq query_module 0032 (false 0033)
  627. 0032: 06 00 00 00000001 ret KILL
  628. 0033: 15 00 01 000000b9 jeq security 0034 (false 0035)
  629. 0034: 06 00 00 00000001 ret KILL
  630. 0035: 15 00 01 0000008b jeq sysfs 0036 (false 0037)
  631. 0036: 06 00 00 00000001 ret KILL
  632. 0037: 15 00 01 000000b8 jeq tuxcall 0038 (false 0039)
  633. 0038: 06 00 00 00000001 ret KILL
  634. 0039: 15 00 01 00000086 jeq uselib 003a (false 003b)
  635. 003a: 06 00 00 00000001 ret KILL
  636. 003b: 15 00 01 00000088 jeq ustat 003c (false 003d)
  637. 003c: 06 00 00 00000001 ret KILL
  638. 003d: 15 00 01 000000ec jeq vserver 003e (false 003f)
  639. 003e: 06 00 00 00000001 ret KILL
  640. 003f: 15 00 01 000000ad jeq ioperm 0040 (false 0041)
  641. 0040: 06 00 00 00000001 ret KILL
  642. 0041: 15 00 01 000000ac jeq iopl 0042 (false 0043)
  643. 0042: 06 00 00 00000001 ret KILL
  644. 0043: 15 00 01 000000f6 jeq kexec_load 0044 (false 0045)
  645. 0044: 06 00 00 00000001 ret KILL
  646. 0045: 15 00 01 00000140 jeq kexec_file_load 0046 (false 0047)
  647. 0046: 06 00 00 00000001 ret KILL
  648. 0047: 15 00 01 000000a9 jeq reboot 0048 (false 0049)
  649. 0048: 06 00 00 00000001 ret KILL
  650. 0049: 15 00 01 000000a7 jeq swapon 004a (false 004b)
  651. 004a: 06 00 00 00000001 ret KILL
  652. 004b: 15 00 01 000000a8 jeq swapoff 004c (false 004d)
  653. 004c: 06 00 00 00000001 ret KILL
  654. 004d: 15 00 01 00000130 jeq open_by_handle_at 004e (false 004f)
  655. 004e: 06 00 00 00000001 ret KILL
  656. 004f: 15 00 01 0000012f jeq name_to_handle_at 0050 (false 0051)
  657. 0050: 06 00 00 00000001 ret KILL
  658. 0051: 15 00 01 000000fb jeq ioprio_set 0052 (false 0053)
  659. 0052: 06 00 00 00000001 ret KILL
  660. 0053: 15 00 01 00000067 jeq syslog 0054 (false 0055)
  661. 0054: 06 00 00 00000001 ret KILL
  662. 0055: 15 00 01 0000012c jeq fanotify_init 0056 (false 0057)
  663. 0056: 06 00 00 00000001 ret KILL
  664. 0057: 15 00 01 00000138 jeq kcmp 0058 (false 0059)
  665. 0058: 06 00 00 00000001 ret KILL
  666. 0059: 15 00 01 000000f8 jeq add_key 005a (false 005b)
  667. 005a: 06 00 00 00000001 ret KILL
  668. 005b: 15 00 01 000000f9 jeq request_key 005c (false 005d)
  669. 005c: 06 00 00 00000001 ret KILL
  670. 005d: 15 00 01 000000ed jeq mbind 005e (false 005f)
  671. 005e: 06 00 00 00000001 ret KILL
  672. 005f: 15 00 01 00000100 jeq migrate_pages 0060 (false 0061)
  673. 0060: 06 00 00 00000001 ret KILL
  674. 0061: 15 00 01 00000117 jeq move_pages 0062 (false 0063)
  675. 0062: 06 00 00 00000001 ret KILL
  676. 0063: 15 00 01 000000fa jeq keyctl 0064 (false 0065)
  677. 0064: 06 00 00 00000001 ret KILL
  678. 0065: 15 00 01 000000ce jeq io_setup 0066 (false 0067)
  679. 0066: 06 00 00 00000001 ret KILL
  680. 0067: 15 00 01 000000cf jeq io_destroy 0068 (false 0069)
  681. 0068: 06 00 00 00000001 ret KILL
  682. 0069: 15 00 01 000000d0 jeq io_getevents 006a (false 006b)
  683. 006a: 06 00 00 00000001 ret KILL
  684. 006b: 15 00 01 000000d1 jeq io_submit 006c (false 006d)
  685. 006c: 06 00 00 00000001 ret KILL
  686. 006d: 15 00 01 000000d2 jeq io_cancel 006e (false 006f)
  687. 006e: 06 00 00 00000001 ret KILL
  688. 006f: 15 00 01 000000d8 jeq remap_file_pages 0070 (false 0071)
  689. 0070: 06 00 00 00000001 ret KILL
  690. 0071: 15 00 01 00000143 jeq userfaultfd 0072 (false 0073)
  691. 0072: 06 00 00 00000001 ret KILL
  692. 0073: 15 00 01 000000a3 jeq acct 0074 (false 0075)
  693. 0074: 06 00 00 00000001 ret KILL
  694. 0075: 15 00 01 00000141 jeq bpf 0076 (false 0077)
  695. 0076: 06 00 00 00000001 ret KILL
  696. 0077: 15 00 01 000000b4 jeq nfsservctl 0078 (false 0079)
  697. 0078: 06 00 00 00000001 ret KILL
  698. 0079: 15 00 01 000000ab jeq setdomainname 007a (false 007b)
  699. 007a: 06 00 00 00000001 ret KILL
  700. 007b: 15 00 01 000000aa jeq sethostname 007c (false 007d)
  701. 007c: 06 00 00 00000001 ret KILL
  702. 007d: 15 00 01 00000099 jeq vhangup 007e (false 007f)
  703. 007e: 06 00 00 00000001 ret KILL
  704. 007f: 15 00 01 00000065 jeq ptrace 0080 (false 0081)
  705. 0080: 06 00 00 00000001 ret KILL
  706. 0081: 15 00 01 00000087 jeq personality 0082 (false 0083)
  707. 0082: 06 00 00 00000001 ret KILL
  708. 0083: 15 00 01 00000136 jeq process_vm_readv 0084 (false 0085)
  709. 0084: 06 00 00 00000001 ret KILL
  710. 0085: 06 00 00 7fff0000 ret ALLOW
  711. line OP JT JF K
  712. =================================
  713. 0000: 20 00 00 00000004 ld data.architecture
  714. 0001: 15 01 00 c000003e jeq ARCH_64 0003 (false 0002)
  715. 0002: 06 00 00 7fff0000 ret ALLOW
  716. 0003: 20 00 00 00000000 ld data.syscall-number
  717. 0004: 35 01 00 40000000 jge X32_ABI 0006 (false 0005)
  718. 0005: 35 01 00 00000000 jge read 0007 (false 0006)
  719. 0006: 06 00 00 00050001 ret ERRNO(1)
  720. 0007: 15 00 05 00000009 jeq mmap 0008 (false 000d)
  721. 0008: 20 00 00 00000020 ld data.args[10]
  722. 0009: 54 00 00 00000006 and 00000006
  723. 000a: 15 00 01 00000006 jeq 6 000b (false 000c)
  724. 000b: 06 00 00 00000001 ret KILL
  725. 000c: 06 00 00 7fff0000 ret ALLOW
  726. 000d: 15 00 05 0000000a jeq a 000e (false 0013)
  727. 000e: 20 00 00 00000020 ld data.args[10]
  728. 000f: 54 00 00 00000004 and 00000004
  729. 0010: 15 00 01 00000004 jeq 4 0011 (false 0012)
  730. 0011: 06 00 00 00000001 ret KILL
  731. 0012: 06 00 00 7fff0000 ret ALLOW
  732. 0013: 15 00 05 00000149 jeq 149 0014 (false 0019)
  733. 0014: 20 00 00 00000020 ld data.args[10]
  734. 0015: 54 00 00 00000004 and 00000004
  735. 0016: 15 00 01 00000004 jeq 4 0017 (false 0018)
  736. 0017: 06 00 00 00000001 ret KILL
  737. 0018: 06 00 00 7fff0000 ret ALLOW
  738. 0019: 15 00 05 0000001e jeq 1e 001a (false 001f)
  739. 001a: 20 00 00 00000020 ld data.args[10]
  740. 001b: 54 00 00 00008000 and 00008000
  741. 001c: 15 00 01 00008000 jeq 8000 001d (false 001e)
  742. 001d: 06 00 00 00000001 ret KILL
  743. 001e: 06 00 00 7fff0000 ret ALLOW
  744. 001f: 15 00 01 0000013f jeq 13f 0020 (false 0021)
  745. 0020: 06 00 00 00000001 ret KILL
  746. 0021: 06 00 00 7fff0000 ret ALLOW
  747. 0022: 06 00 00 7fff0000 ret ALLOW
  748. line OP JT JF K
  749. =================================
  750. 0000: 20 00 00 00000004 ld data.architecture
  751. 0001: 15 01 00 40000003 jeq ARCH_32 0003 (false 0002)
  752. 0002: 06 00 00 7fff0000 ret ALLOW
  753. 0003: 20 00 00 00000000 ld data.syscall-number
  754. 0004: 15 00 01 0000005a jeq 5a 0005 (false 0006)
  755. 0005: 06 00 00 00000001 ret KILL
  756. 0006: 15 00 05 000000c0 jeq c0 0007 (false 000c)
  757. 0007: 20 00 00 00000020 ld data.args[10]
  758. 0008: 54 00 00 00000006 and 00000006
  759. 0009: 15 00 01 00000006 jeq 6 000a (false 000b)
  760. 000a: 06 00 00 00000001 ret KILL
  761. 000b: 06 00 00 7fff0000 ret ALLOW
  762. 000c: 15 00 05 0000007d jeq 7d 000d (false 0012)
  763. 000d: 20 00 00 00000020 ld data.args[10]
  764. 000e: 54 00 00 00000004 and 00000004
  765. 000f: 15 00 01 00000004 jeq 4 0010 (false 0011)
  766. 0010: 06 00 00 00000001 ret KILL
  767. 0011: 06 00 00 7fff0000 ret ALLOW
  768. 0012: 15 00 05 0000017c jeq 17c 0013 (false 0018)
  769. 0013: 20 00 00 00000020 ld data.args[10]
  770. 0014: 54 00 00 00000004 and 00000004
  771. 0015: 15 00 01 00000004 jeq 4 0016 (false 0017)
  772. 0016: 06 00 00 00000001 ret KILL
  773. 0017: 06 00 00 7fff0000 ret ALLOW
  774. 0018: 15 00 05 0000018d jeq 18d 0019 (false 001e)
  775. 0019: 20 00 00 00000020 ld data.args[10]
  776. 001a: 54 00 00 00008000 and 00008000
  777. 001b: 15 00 01 00008000 jeq 8000 001c (false 001d)
  778. 001c: 06 00 00 00000001 ret KILL
  779. 001d: 06 00 00 7fff0000 ret ALLOW
  780. 001e: 15 00 01 00000164 jeq 164 001f (false 0020)
  781. 001f: 06 00 00 00000001 ret KILL
  782. 0020: 06 00 00 7fff0000 ret ALLOW
  783. 0021: 06 00 00 7fff0000 ret ALLOW
  784. /tmp/.X11-unix rw,nosuid,nodev master:66 - tmpfs tmpfs rw,nr_inodes=409600,inode64
  785. mountid=646 fsname=/.X11-unix dir=/tmp/.X11-unix fstype=tmpfs
  786. Mounting noexec /tmp/.X11-unix
  787. 647 646 0:48 /.X11-unix /tmp/.X11-unix rw,nosuid,nodev,noexec master:66 - tmpfs tmpfs rw,nr_inodes=409600,inode64
  788. mountid=647 fsname=/.X11-unix dir=/tmp/.X11-unix fstype=tmpfs
  789. Mounting noexec /var
  790. 651 648 0:59 / /var/tmp rw,nosuid,nodev,noexec - tmpfs tmpfs rw,inode64
  791. mountid=651 fsname=/ dir=/var/tmp fstype=tmpfs
  792. Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib/liblua.so.5.2)
  793. Disable /usr/lib/libluajit-5.1.so.2.0.5 (requested /usr/lib/libluajit-5.1.so)
  794. Disable /usr/lib/liblua5.2.so.5.2.4
  795. Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib/liblua5.2.so.5.2)
  796. Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib/liblua5.2.so)
  797. Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib/liblua.so.5.2.4)
  798. Disable /usr/lib/libluajit-5.1.so.2.0.5 (requested /usr/lib/libluajit-5.1.so.2)
  799. Disable /usr/lib/libluajit-5.1.so.2.0.5
  800. Disable /usr/lib/lua
  801. Disable /usr/share/luajit-2.0.5
  802. Disable /usr/share/lua
  803. Disable /usr/lib/libmozjs-78.so (requested /usr/lib64/libmozjs-78.so)
  804. Disable /usr/lib/perl5
  805. Disable /usr/share/perl5
  806. Disable /usr/lib/php
  807. Disable /usr/lib/ruby
  808. Disable /usr/lib/python2.7
  809. Disable /usr/lib/python3.9
  810. Disable /usr/lib/python3.9 (requested /usr/lib64/python3.9)
  811. Mounting read-only /tmp/.X11-unix
  812. 671 647 0:48 /.X11-unix /tmp/.X11-unix ro,nosuid,nodev,noexec master:66 - tmpfs tmpfs rw,nr_inodes=409600,inode64
  813. mountid=671 fsname=/.X11-unix dir=/tmp/.X11-unix fstype=tmpfs
  814. Disable /sys/fs
  815. Disable /sys/module
  816. Disable /mnt
  817. Disable /run/mount
  818. Disable /run/media
  819. /etc/pulse/client.conf not found
  820. Current directory: /home/dizzy
  821. Install protocol filter: inet,inet6
  822. configuring 18 seccomp entries in /run/firejail/mnt/seccomp/seccomp.protocol
  823. sbox run: /usr/lib/firejail/fsec-print /run/firejail/mnt/seccomp/seccomp.protocol
  824. configuring 101 seccomp entries in /run/firejail/mnt/seccomp/seccomp.32
  825. sbox run: /usr/lib/firejail/fsec-print /run/firejail/mnt/seccomp/seccomp.32
  826. Dual 32/64 bit seccomp filter configured
  827. configuring 134 seccomp entries in /run/firejail/mnt/seccomp/seccomp
  828. sbox run: /usr/lib/firejail/fsec-print /run/firejail/mnt/seccomp/seccomp
  829. seccomp filter configured
  830. Install memory write&execute filter
  831. configuring 35 seccomp entries in /run/firejail/mnt/seccomp/seccomp.mdwx
  832. sbox run: /usr/lib/firejail/fsec-print /run/firejail/mnt/seccomp/seccomp.mdwx
  833. configuring 34 seccomp entries in /run/firejail/mnt/seccomp/seccomp.mdwx.32
  834. sbox run: /usr/lib/firejail/fsec-print /run/firejail/mnt/seccomp/seccomp.mdwx.32
  835. Mounting read-only /run/firejail/mnt/seccomp
  836. 677 513 0:56 /seccomp /run/firejail/mnt/seccomp ro,nosuid - tmpfs tmpfs rw,mode=755,inode64
  837. mountid=677 fsname=/seccomp dir=/run/firejail/mnt/seccomp fstype=tmpfs
  838. Seccomp directory:
  839. ls /run/firejail/mnt/seccomp
  840. drwxr-xr-x root root 200 .
  841. drwxr-xr-x root root 440 ..
  842. -rw-r--r-- 1000 1000 1072 seccomp
  843. -rw-r--r-- 1000 1000 808 seccomp.32
  844. -rw-r--r-- 1000 1000 195 seccomp.list
  845. -rw-r--r-- 1000 1000 280 seccomp.mdwx
  846. -rw-r--r-- 1000 1000 272 seccomp.mdwx.32
  847. -rw-r--r-- 1000 1000 0 seccomp.postexec
  848. -rw-r--r-- 1000 1000 0 seccomp.postexec32
  849. -rw-r--r-- 1000 1000 144 seccomp.protocol
  850. Active seccomp files:
  851. cat /run/firejail/mnt/seccomp/seccomp.list
  852. /run/firejail/mnt/seccomp/seccomp.protocol
  853. /run/firejail/mnt/seccomp/seccomp.32
  854. /run/firejail/mnt/seccomp/seccomp
  855. /run/firejail/mnt/seccomp/seccomp.mdwx
  856. /run/firejail/mnt/seccomp/seccomp.mdwx.32
  857. Dropping all capabilities
  858. noroot user namespace installed
  859. Dropping all capabilities
  860. NO_NEW_PRIVS set
  861. Drop privileges: pid 1, uid 1000, gid 1000, nogroups 1
  862. No supplementary groups
  863. starting application
  864. LD_PRELOAD=(null)
  865. execvp argument 0: newsboat
  866. Starting newsboat 2.22.1...
  867. Loading configuration...done.
  868. Opening cache...done.
  869. Loading URLs from /home/dizzy/.config/newsboat/urls...done.
  870. Loading articles from cache...done.
  871. [?1049h(B[?7h[?1h=(B[?1049l
  872. [?1l>[?25l[?1h=[?1h=[?1049h[?25l]104(B[?7h(B(Bnewsboat 2.22.1 - Your feeds (18 unread, 32 total) (B 1 (0/0) ----------------------- (B2(0/0) -------NEWSFEEDS-------3(0/0) -----------------------4(0/4) XKCD
  873.  5 N (7/10) Linux Journal News
  874.  6 N (53/55) ItsFOSS
  875.  7 N (288/289) ArchWiki: Added Packages
  876.  8 N (242/243) ArchWiki: Removed Packages
  877.  9 N (9/11) Opensource News10(0/0) ArchLinux Security Issues
  878.  11 N (52/54) WeLiveSecurity RSS12(0/0) -----------------------13(0/0) -------YOUTUBE---------14(0/0) -----------------------15(0/0) -----------------------16(0/0) -------REDDIT----------17(0/0) -----------------------
  879.  18 N (152/158) REDDIT: r/linux
  880.  19 N (190/193) REDDIT: r/archlinux
  881.  20 N (95/95) REDDIT: r/gentoo
  882.  21 N (141/141) REDDIT: r/debian
  883.  22 N (73/73) REDDIT: r/freebsd
  884.  23 N (100/100) REDDIT: r/privacy
  885.  24 N (96/96) REDDIT: r/privacytoolsIO
  886.  25 N (31/31) REDDIT: r/encryption
  887.  26 N (31/31) REDDIT: r/GnuPG
  888.  27 N (29/29) REDDIT: r/rss
  889.  28 N (31/31) REDDIT: r/tryhackme29(0/0) -----------------------30(0/0) -------GIT-REPOS-------31(0/0) -----------------------
  890.  32 N (414/422) Linux Kernel Mailing Lists
  891. (Bq:Quit ENTER:Open n:Next Unread r:Reload R:Reload All A:Mark Read <none>:Mark All Read /:Search ?:Help (B(1/32) Loading -----------------------...
  892. (B2/32) Loading -...
  893. (BError while retrieving -------: Error: unsupported URL: -----------------------
  894. (B(14/32) Loading -------...
  895. (BError while retrieving -------: Error: unsupported URL: -----------------------
  896. (B(15/32) Loading -------...
  897. (BError while retrieving -------: Error: unsupported URL: -----------------------
  898. (B(16/32) Loading -------REDDIT...
  899. (BError while retrieving -------REDDIT----------: Error: unsupported URL: -------REDDIT----------
  900. (B(13/32) Loading -------YOUTUBE---------...
  901. (BError while retrieving -------YOUTUBE---------: Error: unsupported URL: -------YOUTUBE---------
  902. (B(9/32) Loading https://opensource.org/news.xml...
  903. (B29/32) Loading -----------------------...
  904. (BError while retrieving -------: Error: unsupported URL: -----------------------
  905. (B(31/32) Loading -------...
  906. (BError while retrieving -------: Error: unsupported URL: -----------------------
  907. (B(30/32) Loading -------GIT-REPOS...
  908. (BError while retrieving -------GIT-REPOS-------: Error: unsupported URL: -------GIT-REPOS-------
  909. (B(32/32) Loading https://lkml.org/rss.php...
  910. (BError while retrieving -----------------------: Error: unsupported URL: -----------------------
  911. (B(3/32) Loading --------...
  912. (BError while retrieving --------: Error: unsupported URL: -----------------------
  913. (B(2/32) Loading -------NEWSFEEDS...
  914. (BError while retrieving -------NEWSFEEDS-------: Error: unsupported URL: -------NEWSFEEDS-------
  915. (B(7/32) Loading https://archlinux.org/feeds/packages/added/x86_64...
  916. (B17/32) Loading -----------------------...
  917. (BError while retrieving -------: Error: unsupported URL: -----------------------
  918. (B(18/32) Loading https://www.reddit.com/r/linux.rss...
  919. (B(B(25/32) Loading https://www.reddit.com/r/encryption.rss...
  920. (B(B(10/32) Loading https://security.archlinux.org/...
  921. (B(B(8/32) Loading https://archlinux.org/feeds/packages/removed/x86_64...
  922. (B(B(19/32) Loading https://www.reddit.com/r/archlinux.rss...
  923. (BError while retrieving https://security.archlinux.org/: unsupported feed format
  924. (B(11/32) Loading https://www.welivesecurity.com/feed...
  925. (B(B(20/32) Loading https://www.reddit.com/r/Gentoo.rss...
  926. (B(B(4/32) Loading https://xkcd.com/atom.xml...
  927. (B(B(21/32) Loading https://www.reddit.com/r/debian.rss...
  928. (B[?12l[?25h[?1049l
  929. [?1l>Cleaning up cache...done.
  930. Dropping all capabilities
  931. noroot user namespace installed
  932. Dropping all capabilities
  933. NO_NEW_PRIVS set
  934. Drop privileges: pid 1, uid 1000, gid 1000, nogroups 1
  935. No supplementary groups
  936. monitoring pid 12
  937.  
  938.  
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!