diff options
| author |  glitsj16 <glitsj16@users.noreply.github.com> | 2019-02-24 21:05:42 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2019-02-24 21:05:42 +0000 |
| commit | 549427d4af256676e809d5bfdfd0ec8ae2ca83a9 (patch) | |
| tree | ccb60ccee91147dcbf55fac1ca6b627d8f544731 | |
| parent | Create new dconf/gsettings profiles (#2453) (diff) | |
| download | firejail-549427d4af256676e809d5bfdfd0ec8ae2ca83a9.tar.gz firejail-549427d4af256676e809d5bfdfd0ec8ae2ca83a9.tar.zst firejail-549427d4af256676e809d5bfdfd0ec8ae2ca83a9.zip | |
Harden dig.profile (#2454)
| -rw-r--r-- | etc/dig.profile | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/etc/dig.profile b/etc/dig.profile index f5b26c195..6d5e97ac3 100644 --- a/etc/dig.profile +++ b/etc/dig.profile | |||
| @@ -20,6 +20,7 @@ include whitelist-var-common.inc | |||
| 20 | 20 | ||
| 21 | caps.drop all | 21 | caps.drop all |
| 22 | # ipc-namespace | 22 | # ipc-namespace |
| 23 | machine-id | ||
| 23 | netfilter | 24 | netfilter |
| 24 | no3d | 25 | no3d |
| 25 | nodbus | 26 | nodbus |
| @@ -45,5 +46,5 @@ private-lib | |||
| 45 | private-tmp | 46 | private-tmp |
| 46 | 47 | ||
| 47 | memory-deny-write-execute | 48 | memory-deny-write-execute |
| 48 | # noexec ${HOME} | 49 | noexec ${HOME} |
| 49 | # noexec /tmp | 50 | noexec /tmp |