diff options
| author |  netblue30 <netblue30@yahoo.com> | 2020-10-02 12:43:56 -0400 |
|---|---|---|
| committer | netblue30 <netblue30@yahoo.com> | 2020-10-02 12:43:56 -0400 |
| commit | 2b0fe9759501818b10e0654e7f83383bb4b8e8a4 (patch) | |
| tree | 998e9a852ca75eba18c145f1f9e27bb50d4d829a /README.md | |
| parent | splitting up media players whitelists in whitelist-players.inc - relnotes (diff) | |
| download | firejail-2b0fe9759501818b10e0654e7f83383bb4b8e8a4.tar.gz firejail-2b0fe9759501818b10e0654e7f83383bb4b8e8a4.tar.zst firejail-2b0fe9759501818b10e0654e7f83383bb4b8e8a4.zip | |
profstats - add count for whitelisted home dir, dbus-user none
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 38 |
1 files changed, 20 insertions, 18 deletions
| @@ -166,25 +166,27 @@ $ ./profstats *.profile | |||
| 166 | Warning: multiple caps in transmission-daemon.profile | 166 | Warning: multiple caps in transmission-daemon.profile |
| 167 | 167 | ||
| 168 | Stats: | 168 | Stats: |
| 169 | profiles 1025 | 169 | profiles 1029 |
| 170 | include local profile 1025 (include profile-name.local) | 170 | include local profile 1029 (include profile-name.local) |
| 171 | include globals 1025 (include globals.local) | 171 | include globals 1029 (include globals.local) |
| 172 | blacklist ~/.ssh 1001 (include disable-common.inc) | 172 | blacklist ~/.ssh 1005 (include disable-common.inc) |
| 173 | seccomp 971 | 173 | seccomp 975 |
| 174 | capabilities 1024 | 174 | capabilities 1028 |
| 175 | noexec 895 (include disable-exec.inc) | 175 | noexec 899 (include disable-exec.inc) |
| 176 | memory-deny-write-execute 217 | 176 | memory-deny-write-execute 220 |
| 177 | apparmor 546 | 177 | apparmor 549 |
| 178 | private-bin 537 | 178 | private-bin 542 |
| 179 | private-dev 893 | 179 | private-dev 897 |
| 180 | private-etc 426 | 180 | private-etc 431 |
| 181 | private-tmp 780 | 181 | private-tmp 784 |
| 182 | whitelist var 691 (include whitelist-var-common.inc) | 182 | whitelist home directory 469 |
| 183 | whitelist run/user 329 (include whitelist-runuser-common.inc | 183 | whitelist var 695 (include whitelist-var-common.inc) |
| 184 | whitelist run/user 334 (include whitelist-runuser-common.inc | ||
| 184 | or blacklist ${RUNUSER}) | 185 | or blacklist ${RUNUSER}) |
| 185 | whitelist usr/share 349 (include whitelist-usr-share-common.inc | 186 | whitelist usr/share 354 (include whitelist-usr-share-common.inc |
| 186 | net none 329 | 187 | net none 332 |
| 187 | dbus-system none 624 | 188 | dbus-user none 523 |
| 189 | dbus-system none 627 | ||
| 188 | ````` | 190 | ````` |
| 189 | 191 | ||
| 190 | ### New profiles: | 192 | ### New profiles: |