diff options
| author |  Fred Barclay <Fred-Barclay@users.noreply.github.com> | 2017-08-13 15:06:44 -0500 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2017-08-13 15:06:44 -0500 |
| commit | 874db1cf088180ab608eaff4a64cf15ba2859386 (patch) | |
| tree | c26473cf96988812a191350816bbee65fd5e889e /etc/chromium.profile | |
| parent | Fix copy-paste (diff) | |
| parent | Chrom* on Arch Linux no longer uses a perl script (diff) | |
| download | firejail-874db1cf088180ab608eaff4a64cf15ba2859386.tar.gz firejail-874db1cf088180ab608eaff4a64cf15ba2859386.tar.zst firejail-874db1cf088180ab608eaff4a64cf15ba2859386.zip | |
Merge pull request #1444 from SpotComms/h2
Harden 18 profiles using private-bin
Diffstat (limited to 'etc/chromium.profile')
| -rw-r--r-- | etc/chromium.profile | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/chromium.profile b/etc/chromium.profile index 7637b8ea5..e28606054 100644 --- a/etc/chromium.profile +++ b/etc/chromium.profile | |||
| @@ -11,8 +11,7 @@ noblacklist ~/.config/chromium-flags.conf | |||
| 11 | noblacklist ~/.pki | 11 | noblacklist ~/.pki |
| 12 | 12 | ||
| 13 | include /etc/firejail/disable-common.inc | 13 | include /etc/firejail/disable-common.inc |
| 14 | # chromium is distributed with a perl script on Arch | 14 | include /etc/firejail/disable-devel.inc |
| 15 | # include /etc/firejail/disable-devel.inc | ||
| 16 | include /etc/firejail/disable-programs.inc | 15 | include /etc/firejail/disable-programs.inc |
| 17 | 16 | ||
| 18 | mkdir ~/.cache/chromium | 17 | mkdir ~/.cache/chromium |
| @@ -31,6 +30,7 @@ nogroups | |||
| 31 | notv | 30 | notv |
| 32 | shell none | 31 | shell none |
| 33 | 32 | ||
| 33 | # private-bin chromium,chromium-browser,chromedriver | ||
| 34 | private-dev | 34 | private-dev |
| 35 | # private-tmp - problems with multiple browser sessions | 35 | # private-tmp - problems with multiple browser sessions |
| 36 | 36 | ||