diff options
author | 2021-05-05 14:40:14 +0000 | |
---|---|---|
committer | 2021-05-05 14:40:14 +0000 | |
commit | 9adeaf0c6f302c3091496848bc6e3b732064e1e3 (patch) | |
tree | 8329f68070bbc2b1652e74e0bba2b010cdda92f2 | |
parent | Merge pull request #4242 from aminvakil/wireshark_seccomp_disable (diff) | |
download | firejail-9adeaf0c6f302c3091496848bc6e3b732064e1e3.tar.gz firejail-9adeaf0c6f302c3091496848bc6e3b732064e1e3.tar.zst firejail-9adeaf0c6f302c3091496848bc6e3b732064e1e3.zip |
some wireshark hardening (#4245)
* restrict D-Bus access in wireshark
* add private-cache to wireshark
-rw-r--r-- | etc/profile-m-z/wireshark.profile | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/profile-m-z/wireshark.profile b/etc/profile-m-z/wireshark.profile index 9dbf1a960..1824026a8 100644 --- a/etc/profile-m-z/wireshark.profile +++ b/etc/profile-m-z/wireshark.profile | |||
@@ -45,6 +45,10 @@ shell none | |||
45 | tracelog | 45 | tracelog |
46 | 46 | ||
47 | # private-bin wireshark | 47 | # private-bin wireshark |
48 | private-cache | ||
48 | private-dev | 49 | private-dev |
49 | # private-etc alternatives,ca-certificates,crypto-policies,fonts,group,hosts,machine-id,passwd,pki,ssl | 50 | # private-etc alternatives,ca-certificates,crypto-policies,fonts,group,hosts,machine-id,passwd,pki,ssl |
50 | private-tmp | 51 | private-tmp |
52 | |||
53 | dbus-user none | ||
54 | dbus-system none | ||