diff options
| author |  rusty-snake <print_hello_world+Public@protonmail.com> | 2019-04-13 12:23:22 +0200 |
|---|---|---|
| committer | rusty-snake <print_hello_world+Public@protonmail.com> | 2019-04-13 12:23:22 +0200 |
| commit | 947337b257612a0291f883149f1e001ccf26112b (patch) | |
| tree | 60f54ba8745b106c91aabf5e454ec577c2fe8112 /etc/default.profile | |
| parent | More disable-exec stuff (#2647) (diff) | |
| download | firejail-947337b257612a0291f883149f1e001ccf26112b.tar.gz firejail-947337b257612a0291f883149f1e001ccf26112b.tar.zst firejail-947337b257612a0291f883149f1e001ccf26112b.zip | |
More disable-exec and hardening
Diffstat (limited to 'etc/default.profile')
| -rw-r--r-- | etc/default.profile | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/default.profile b/etc/default.profile index 3eacf9546..95a6e8095 100644 --- a/etc/default.profile +++ b/etc/default.profile | |||
| @@ -19,6 +19,8 @@ include disable-programs.inc | |||
| 19 | # apparmor | 19 | # apparmor |
| 20 | caps.drop all | 20 | caps.drop all |
| 21 | # ipc-namespace | 21 | # ipc-namespace |
| 22 | # machine-id | ||
| 23 | # net none | ||
| 22 | netfilter | 24 | netfilter |
| 23 | # no3d | 25 | # no3d |
| 24 | # nodbus | 26 | # nodbus |
| @@ -33,6 +35,7 @@ noroot | |||
| 33 | protocol unix,inet,inet6 | 35 | protocol unix,inet,inet6 |
| 34 | seccomp | 36 | seccomp |
| 35 | # shell none | 37 | # shell none |
| 38 | # tracelog | ||
| 36 | 39 | ||
| 37 | # disable-mnt | 40 | # disable-mnt |
| 38 | # private | 41 | # private |