--noprinter option

netblue30 · Oct 21, 2021 · bd15e76 · bd15e76
1 parent 72e9016
commit bd15e76
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/src/firejail/main.c b/src/firejail/main.c
@@ -2156,6 +2156,10 @@ int main(int argc, char **argv, char **envp) {
 			arg_novideo = 1;
 		else if (strcmp(argv[i], "--no3d") == 0)
 			arg_no3d = 1;
+		else if (strcmp(argv[i], "--noprinter") == 0) {
+			profile_add("blacklist /dev/lp*");
+			profile_add("blacklist /run/cups/cups.sock");
+		}
 		else if (strcmp(argv[i], "--notv") == 0)
 			arg_notv = 1;
 		else if (strcmp(argv[i], "--nodvd") == 0)

diff --git a/src/firejail/profile.c b/src/firejail/profile.c
@@ -449,6 +449,11 @@ int profile_check_line(char *ptr, int lineno, const char *fname) {
 		arg_no3d = 1;
 		return 0;
 	}
+	else if (strcmp(ptr, "noprinter") == 0) {
+		profile_add("blacklist /dev/lp*");
+		profile_add("blacklist /run/cups/cups.sock");
+		return 0;
+	}
 	else if (strcmp(ptr, "noinput") == 0) {
 		arg_noinput = 1;
 		return 0;