diff options
author | root <root@HP.yukino.local> | 2016-06-25 15:57:38 +0400 |
---|---|---|
committer | root <root@HP.yukino.local> | 2016-06-25 15:57:38 +0400 |
commit | b92cae3a9222decc4aebb447a44ffa127cedd3be (patch) | |
tree | 8f03e6a24ebe1698159e7e94f6020697d76db8b8 | |
parent | updated syscall list (diff) | |
download | firejail-b92cae3a9222decc4aebb447a44ffa127cedd3be.tar.gz firejail-b92cae3a9222decc4aebb447a44ffa127cedd3be.tar.zst firejail-b92cae3a9222decc4aebb447a44ffa127cedd3be.zip |
Committer: Paupiah Yashvi <yash@hackers.mu>
Desctiption: Gzip sandbox profile for decompression
Changes to be committed:
new file: gzip.profile
-rw-r--r-- | etc/gzip.profile | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/etc/gzip.profile b/etc/gzip.profile new file mode 100644 index 000000000..f231c3780 --- /dev/null +++ b/etc/gzip.profile | |||
@@ -0,0 +1,19 @@ | |||
1 | ################################ | ||
2 | # Gzip profile | ||
3 | ################################ | ||
4 | include /etc/firejail/disable-common.inc | ||
5 | include /etc/firejail/disable-programs.inc | ||
6 | include /etc/firejail/disable-passwdmgr.inc | ||
7 | |||
8 | blacklist ${HOME}/.wine | ||
9 | blacklist ${HOME}/.ssh | ||
10 | |||
11 | tracelog | ||
12 | caps.drop all | ||
13 | seccomp | ||
14 | net none | ||
15 | noroot | ||
16 | nosound | ||
17 | nogroups | ||
18 | nonewprivs | ||
19 | |||