diff options
| author |  Tad <tad@spotco.us> | 2018-09-19 15:32:18 -0400 |
|---|---|---|
| committer | Tad <tad@spotco.us> | 2018-09-19 15:32:48 -0400 |
| commit | c0ba48bec1bc11c98cbac3c6cc9fdf117dcb98d1 (patch) | |
| tree | 83e0f2b4020db3c9ae6c0501aab2d30f56df086e /etc/bless.profile | |
| parent | 0.9.56 released (diff) | |
| download | firejail-c0ba48bec1bc11c98cbac3c6cc9fdf117dcb98d1.tar.gz firejail-c0ba48bec1bc11c98cbac3c6cc9fdf117dcb98d1.tar.zst firejail-c0ba48bec1bc11c98cbac3c6cc9fdf117dcb98d1.zip | |
Misc profile hardening
Diffstat (limited to 'etc/bless.profile')
| -rw-r--r-- | etc/bless.profile | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/bless.profile b/etc/bless.profile index 01f75b00d..0da3436e8 100644 --- a/etc/bless.profile +++ b/etc/bless.profile | |||
| @@ -14,6 +14,8 @@ include /etc/firejail/disable-interpreters.inc | |||
| 14 | include /etc/firejail/disable-passwdmgr.inc | 14 | include /etc/firejail/disable-passwdmgr.inc |
| 15 | include /etc/firejail/disable-programs.inc | 15 | include /etc/firejail/disable-programs.inc |
| 16 | 16 | ||
| 17 | include /etc/firejail/whitelist-var-common.inc | ||
| 18 | |||
| 17 | caps.drop all | 19 | caps.drop all |
| 18 | net none | 20 | net none |
| 19 | no3d | 21 | no3d |