Merge pull request #1232 from SpotComms/harden3

Harden more profiles

1 files changed, 6 insertions, 1 deletions

diff --git a/etc/brasero.profile b/etc/brasero.profile
index 6d84b0ca5..a15a54ddb 100644
--- a/etc/brasero.profile
+++ b/etc/brasero.profile
@@ -11,6 +11,8 @@ include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
 
 caps.drop all
+ipc-namespace
+net none
 nogroups
 nonewprivs
 noroot
@@ -22,6 +24,9 @@ shell none
 tracelog
 
 # private-bin brasero
-# private-tmp
 # private-dev
 # private-etc fonts
+# private-tmp
+
+noexec ${HOME}
+noexec /tmp