diff options
author | 2016-11-20 10:25:29 -0500 | |
---|---|---|
committer | 2016-11-20 10:25:29 -0500 | |
commit | 0c207322206d3882a9ccf2145531a8105885c12e (patch) | |
tree | 415e8c372c0631b276baf57b0747de79d9d04265 /etc/default.profile | |
parent | Merge pull request #923 from vn971/seccomp-explain-audit (diff) | |
parent | fixed mudpf profile for debian (diff) | |
download | firejail-0c207322206d3882a9ccf2145531a8105885c12e.tar.gz firejail-0c207322206d3882a9ccf2145531a8105885c12e.tar.zst firejail-0c207322206d3882a9ccf2145531a8105885c12e.zip |
Merge pull request #924 from valoq/master
Many new profiles
Diffstat (limited to 'etc/default.profile')
-rw-r--r-- | etc/default.profile | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/etc/default.profile b/etc/default.profile index a2de72695..487e80c64 100644 --- a/etc/default.profile +++ b/etc/default.profile | |||
@@ -5,11 +5,17 @@ include /etc/firejail/disable-common.inc | |||
5 | include /etc/firejail/disable-programs.inc | 5 | include /etc/firejail/disable-programs.inc |
6 | include /etc/firejail/disable-passwdmgr.inc | 6 | include /etc/firejail/disable-passwdmgr.inc |
7 | 7 | ||
8 | #blacklist ${HOME}/.wine | ||
9 | |||
10 | caps.drop all | 8 | caps.drop all |
11 | netfilter | 9 | netfilter |
10 | nogroups | ||
12 | nonewprivs | 11 | nonewprivs |
13 | noroot | 12 | noroot |
14 | protocol unix,inet,inet6 | 13 | protocol unix,inet,inet6 |
15 | seccomp | 14 | seccomp |
15 | shell none | ||
16 | |||
17 | # private-bin program | ||
18 | # private-etc none | ||
19 | # private-dev | ||
20 | # private-tmp | ||
21 | |||