diff options
| author |  netblue30 <netblue30@yahoo.com> | 2020-04-04 22:30:06 -0400 |
|---|---|---|
| committer | netblue30 <netblue30@yahoo.com> | 2020-04-04 22:30:06 -0400 |
| commit | 062e21d65096640be11f63c69e950f0b97c7498e (patch) | |
| tree | 25c5c91d4902bccbe29f6c474d78df4c4219df4d /etc/dig.profile | |
| parent | fix alphabetical ordering of caps.keep in slack.profile (diff) | |
| download | firejail-062e21d65096640be11f63c69e950f0b97c7498e.tar.gz firejail-062e21d65096640be11f63c69e950f0b97c7498e.tar.zst firejail-062e21d65096640be11f63c69e950f0b97c7498e.zip | |
profile fixes
Diffstat (limited to 'etc/dig.profile')
| -rw-r--r-- | etc/dig.profile | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/etc/dig.profile b/etc/dig.profile index 270a95c05..f283db962 100644 --- a/etc/dig.profile +++ b/etc/dig.profile | |||
| @@ -25,6 +25,7 @@ include disable-xdg.inc | |||
| 25 | #mkfile ${HOME}/.digrc -- see #903 | 25 | #mkfile ${HOME}/.digrc -- see #903 |
| 26 | whitelist ${HOME}/.digrc | 26 | whitelist ${HOME}/.digrc |
| 27 | include whitelist-common.inc | 27 | include whitelist-common.inc |
| 28 | include whitelist-runuser-common.inc | ||
| 28 | include whitelist-usr-share-common.inc | 29 | include whitelist-usr-share-common.inc |
| 29 | include whitelist-var-common.inc | 30 | include whitelist-var-common.inc |
| 30 | 31 | ||
| @@ -32,6 +33,7 @@ apparmor | |||
| 32 | caps.drop all | 33 | caps.drop all |
| 33 | ipc-namespace | 34 | ipc-namespace |
| 34 | machine-id | 35 | machine-id |
| 36 | memory-deny-write-execute | ||
| 35 | netfilter | 37 | netfilter |
| 36 | no3d | 38 | no3d |
| 37 | nodbus | 39 | nodbus |
| @@ -49,7 +51,6 @@ shell none | |||
| 49 | tracelog | 51 | tracelog |
| 50 | 52 | ||
| 51 | disable-mnt | 53 | disable-mnt |
| 52 | private | ||
| 53 | private-bin bash,dig,sh | 54 | private-bin bash,dig,sh |
| 54 | private-dev | 55 | private-dev |
| 55 | # Uncomment the next line (or put 'private-lib' in your dig.local) on non Debian/Ubuntu OS (see issue #3038) | 56 | # Uncomment the next line (or put 'private-lib' in your dig.local) on non Debian/Ubuntu OS (see issue #3038) |