aboutsummaryrefslogtreecommitdiffstats
path: root/etc/default.profile
diff options
context:
space:
mode:
authorLibravatar Fred Barclay <Fred-Barclay@users.noreply.github.com>2020-04-07 16:14:25 -0500
committerLibravatar Fred Barclay <Fred-Barclay@users.noreply.github.com>2020-04-07 16:14:25 -0500
commit3848b98961614e1776b29ecfb76ef4c750b6b25f (patch)
tree3c7f0b623978562ee23fba7f52b6a039571cebea /etc/default.profile
parentdbus-proxy (gnome_games) (diff)
downloadfirejail-3848b98961614e1776b29ecfb76ef4c750b6b25f.tar.gz
firejail-3848b98961614e1776b29ecfb76ef4c750b6b25f.tar.zst
firejail-3848b98961614e1776b29ecfb76ef4c750b6b25f.zip
Replace `nodbus` with dbus-* filters
See - 07fac581f6b9b5ed068f4c54a9521b51826375c5 for new dbus filters - https://github.com/netblue30/firejail/pull/3326#issuecomment-610423183 Except for ocenaudio, access/restrictions on dbus options should be unchanged Ocenaudio profile: dbus filters were sandboxed (initially `nodbus` was enabled) since comments indicated blocking dbus meant preferences were broken
Diffstat (limited to 'etc/default.profile')
-rw-r--r--etc/default.profile4
1 files changed, 3 insertions, 1 deletions
diff --git a/etc/default.profile b/etc/default.profile
index 7731b6e00..74314cf92 100644
--- a/etc/default.profile
+++ b/etc/default.profile
@@ -28,7 +28,6 @@ caps.drop all
28# net none 28# net none
29netfilter 29netfilter
30# no3d 30# no3d
31# nodbus
32# nodvd 31# nodvd
33# nogroups 32# nogroups
34nonewprivs 33nonewprivs
@@ -53,5 +52,8 @@ seccomp
53# private-opt none 52# private-opt none
54# private-tmp 53# private-tmp
55 54
55# dbus-user none
56# dbus-system none
57
56# memory-deny-write-execute 58# memory-deny-write-execute
57# read-only ${HOME} 59# read-only ${HOME}