diff options
| author |  Chiraag Nataraj <chiraag.nataraj@gmail.com> | 2017-09-16 14:24:54 -0400 |
|---|---|---|
| committer |  Tad <tad@spotco.us> | 2017-09-18 18:24:13 -0400 |
| commit | 28faab8af4d2ea0699fbb09b0345f2c68d5ad382 (patch) | |
| tree | 3b1ca33ede83d499cccf28c8384df026a1fdd836 /etc/akregator.profile | |
| parent | Fixup 12 profiles (diff) | |
| download | firejail-28faab8af4d2ea0699fbb09b0345f2c68d5ad382.tar.gz firejail-28faab8af4d2ea0699fbb09b0345f2c68d5ad382.tar.zst firejail-28faab8af4d2ea0699fbb09b0345f2c68d5ad382.zip | |
Harden 10 profiles
Diffstat (limited to 'etc/akregator.profile')
| -rw-r--r-- | etc/akregator.profile | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/etc/akregator.profile b/etc/akregator.profile index 12bb06fb5..55434e45b 100644 --- a/etc/akregator.profile +++ b/etc/akregator.profile | |||
| @@ -13,6 +13,12 @@ include /etc/firejail/disable-devel.inc | |||
| 13 | include /etc/firejail/disable-passwdmgr.inc | 13 | include /etc/firejail/disable-passwdmgr.inc |
| 14 | include /etc/firejail/disable-programs.inc | 14 | include /etc/firejail/disable-programs.inc |
| 15 | 15 | ||
| 16 | mkfile ${HOME}/.config/akregatorrc | ||
| 17 | mkdir ${HOME}/.local/share/akregator | ||
| 18 | whitelist ${HOME}/.config/akregatorrc | ||
| 19 | whitelist ${HOME}/.local/share/akregator | ||
| 20 | include /etc/firejail/whitelist-common.inc | ||
| 21 | |||
| 16 | caps.drop all | 22 | caps.drop all |
| 17 | netfilter | 23 | netfilter |
| 18 | no3d | 24 | no3d |
| @@ -27,6 +33,7 @@ seccomp | |||
| 27 | shell none | 33 | shell none |
| 28 | 34 | ||
| 29 | disable-mnt | 35 | disable-mnt |
| 36 | private-bin akregator,akregatorstorageexporter,dbus-launch,kdeinit5,kshell5,kdeinit5_shutdown,kdeinit5_wrapper,kdeinit4,kshell4,kdeinit4_shutdown,kdeinit4_wrapper | ||
| 30 | private-dev | 37 | private-dev |
| 31 | private-tmp | 38 | private-tmp |
| 32 | 39 | ||