diff options
author | 2019-02-24 21:05:42 +0000 | |
---|---|---|
committer | 2019-02-24 21:05:42 +0000 | |
commit | 549427d4af256676e809d5bfdfd0ec8ae2ca83a9 (patch) | |
tree | ccb60ccee91147dcbf55fac1ca6b627d8f544731 | |
parent | Create new dconf/gsettings profiles (#2453) (diff) | |
download | firejail-549427d4af256676e809d5bfdfd0ec8ae2ca83a9.tar.gz firejail-549427d4af256676e809d5bfdfd0ec8ae2ca83a9.tar.zst firejail-549427d4af256676e809d5bfdfd0ec8ae2ca83a9.zip |
Harden dig.profile (#2454)
-rw-r--r-- | etc/dig.profile | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/etc/dig.profile b/etc/dig.profile index f5b26c195..6d5e97ac3 100644 --- a/etc/dig.profile +++ b/etc/dig.profile | |||
@@ -20,6 +20,7 @@ include whitelist-var-common.inc | |||
20 | 20 | ||
21 | caps.drop all | 21 | caps.drop all |
22 | # ipc-namespace | 22 | # ipc-namespace |
23 | machine-id | ||
23 | netfilter | 24 | netfilter |
24 | no3d | 25 | no3d |
25 | nodbus | 26 | nodbus |
@@ -45,5 +46,5 @@ private-lib | |||
45 | private-tmp | 46 | private-tmp |
46 | 47 | ||
47 | memory-deny-write-execute | 48 | memory-deny-write-execute |
48 | # noexec ${HOME} | 49 | noexec ${HOME} |
49 | # noexec /tmp | 50 | noexec /tmp |