diff options
| author |  smitsohu <smitsohu@gmail.com> | 2017-08-22 01:54:31 +0200 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2017-08-22 01:54:31 +0200 |
| commit | f12c7af205ddd6c0d75587702f01688dc62a86c5 (patch) | |
| tree | 853df0cb54dee640560b1832c14644df0ec18293 /etc/eom.profile | |
| parent | testing (diff) | |
| download | firejail-f12c7af205ddd6c0d75587702f01688dc62a86c5.tar.gz firejail-f12c7af205ddd6c0d75587702f01688dc62a86c5.tar.zst firejail-f12c7af205ddd6c0d75587702f01688dc62a86c5.zip | |
various profile fixes
Diffstat (limited to 'etc/eom.profile')
| -rw-r--r-- | etc/eom.profile | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/eom.profile b/etc/eom.profile index 6fd069b5c..3fb1fcaf4 100644 --- a/etc/eom.profile +++ b/etc/eom.profile | |||
| @@ -16,6 +16,8 @@ include /etc/firejail/disable-passwdmgr.inc | |||
| 16 | include /etc/firejail/disable-programs.inc | 16 | include /etc/firejail/disable-programs.inc |
| 17 | 17 | ||
| 18 | caps.drop all | 18 | caps.drop all |
| 19 | # net none - makes settings immutable | ||
| 20 | no3d | ||
| 19 | nodvd | 21 | nodvd |
| 20 | nogroups | 22 | nogroups |
| 21 | nonewprivs | 23 | nonewprivs |
| @@ -30,7 +32,9 @@ tracelog | |||
| 30 | 32 | ||
| 31 | private-bin eom | 33 | private-bin eom |
| 32 | private-dev | 34 | private-dev |
| 35 | private-etc fonts | ||
| 33 | private-tmp | 36 | private-tmp |
| 34 | 37 | ||
| 38 | memory-deny-write-execute | ||
| 35 | noexec ${HOME} | 39 | noexec ${HOME} |
| 36 | noexec /tmp | 40 | noexec /tmp |