diff options
author | 2017-08-23 07:46:52 -0400 | |
---|---|---|
committer | 2017-08-23 07:46:52 -0400 | |
commit | 976e7ea76e8ffcfd73eb9a3f7c791b5ed0bcdf66 (patch) | |
tree | ffc1657e4af251064848d1b0abd05370df67f1b4 /etc/eom.profile | |
parent | Merge pull request #1488 from SpotComms/mf (diff) | |
parent | harmonize vlc and cvlc (diff) | |
download | firejail-976e7ea76e8ffcfd73eb9a3f7c791b5ed0bcdf66.tar.gz firejail-976e7ea76e8ffcfd73eb9a3f7c791b5ed0bcdf66.tar.zst firejail-976e7ea76e8ffcfd73eb9a3f7c791b5ed0bcdf66.zip |
Merge pull request #1489 from smitsohu/profilefixes
profile fixes and enhancements
Diffstat (limited to 'etc/eom.profile')
-rw-r--r-- | etc/eom.profile | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/eom.profile b/etc/eom.profile index 6fd069b5c..3fb1fcaf4 100644 --- a/etc/eom.profile +++ b/etc/eom.profile | |||
@@ -16,6 +16,8 @@ include /etc/firejail/disable-passwdmgr.inc | |||
16 | include /etc/firejail/disable-programs.inc | 16 | include /etc/firejail/disable-programs.inc |
17 | 17 | ||
18 | caps.drop all | 18 | caps.drop all |
19 | # net none - makes settings immutable | ||
20 | no3d | ||
19 | nodvd | 21 | nodvd |
20 | nogroups | 22 | nogroups |
21 | nonewprivs | 23 | nonewprivs |
@@ -30,7 +32,9 @@ tracelog | |||
30 | 32 | ||
31 | private-bin eom | 33 | private-bin eom |
32 | private-dev | 34 | private-dev |
35 | private-etc fonts | ||
33 | private-tmp | 36 | private-tmp |
34 | 37 | ||
38 | memory-deny-write-execute | ||
35 | noexec ${HOME} | 39 | noexec ${HOME} |
36 | noexec /tmp | 40 | noexec /tmp |