diff options
author | rusty-snake <print_hello_world+Public@protonmail.com> | 2020-01-18 12:22:12 +0100 |
---|---|---|
committer | rusty-snake <print_hello_world+Public@protonmail.com> | 2020-01-18 12:22:12 +0100 |
commit | 7d7e5f6840c99d65839ecbd105686eae61fa9b43 (patch) | |
tree | 8adfa25de37328924a2fbba95e826dbd74acf312 /etc/baobab.profile | |
parent | refactor claws-mail and sylpheed as whitelist profiles (#3162) (diff) | |
download | firejail-7d7e5f6840c99d65839ecbd105686eae61fa9b43.tar.gz firejail-7d7e5f6840c99d65839ecbd105686eae61fa9b43.tar.zst firejail-7d7e5f6840c99d65839ecbd105686eae61fa9b43.zip |
harden baoba and transmission-common
Diffstat (limited to 'etc/baobab.profile')
-rw-r--r-- | etc/baobab.profile | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/baobab.profile b/etc/baobab.profile index e8287b448..18c862a4d 100644 --- a/etc/baobab.profile +++ b/etc/baobab.profile | |||
@@ -12,6 +12,7 @@ include disable-exec.inc | |||
12 | include disable-interpreters.inc | 12 | include disable-interpreters.inc |
13 | include disable-passwdmgr.inc | 13 | include disable-passwdmgr.inc |
14 | # include disable-programs.inc | 14 | # include disable-programs.inc |
15 | # include disable-xdg.inc | ||
15 | 16 | ||
16 | caps.drop all | 17 | caps.drop all |
17 | net none | 18 | net none |
@@ -32,3 +33,5 @@ shell none | |||
32 | private-bin baobab | 33 | private-bin baobab |
33 | private-dev | 34 | private-dev |
34 | private-tmp | 35 | private-tmp |
36 | |||
37 | read-only ${HOME} | ||