diff options
author | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-05-13 10:48:43 +0200 |
---|---|---|
committer | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-05-14 06:07:13 +0000 |
commit | ee7b466576a06ec8ccb82e7ad8277d7f7fe4549b (patch) | |
tree | c796c7b6daa55e7614c2797519f2f589828a3f99 | |
parent | check if allocation was successful (diff) | |
download | firejail-ee7b466576a06ec8ccb82e7ad8277d7f7fe4549b.tar.gz firejail-ee7b466576a06ec8ccb82e7ad8277d7f7fe4549b.tar.zst firejail-ee7b466576a06ec8ccb82e7ad8277d7f7fe4549b.zip |
Harden device access in default.profile
-rw-r--r-- | etc/profile-a-l/default.profile | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/etc/profile-a-l/default.profile b/etc/profile-a-l/default.profile index 2ecf1a45d..5bdf5df7f 100644 --- a/etc/profile-a-l/default.profile +++ b/etc/profile-a-l/default.profile | |||
@@ -32,12 +32,13 @@ netfilter | |||
32 | # no3d | 32 | # no3d |
33 | # nodvd | 33 | # nodvd |
34 | # nogroups | 34 | # nogroups |
35 | noinput | ||
35 | nonewprivs | 36 | nonewprivs |
36 | noroot | 37 | noroot |
37 | # nosound | 38 | # nosound |
38 | # notv | 39 | notv |
39 | # nou2f | 40 | # nou2f |
40 | # novideo | 41 | novideo |
41 | protocol unix,inet,inet6 | 42 | protocol unix,inet,inet6 |
42 | seccomp | 43 | seccomp |
43 | # shell none | 44 | # shell none |