diff options
author | smitsohu <smitsohu@gmail.com> | 2017-09-25 15:57:50 +0200 |
---|---|---|
committer | smitsohu <smitsohu@gmail.com> | 2017-09-25 15:57:50 +0200 |
commit | 9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2 (patch) | |
tree | 632cecd6b845ecc93c5024170671a9894c2cda49 /etc/evince.profile | |
parent | fix nginx and apache2, possible fix for #1534 (diff) | |
download | firejail-9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2.tar.gz firejail-9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2.tar.zst firejail-9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2.zip |
various profile enhancements
* okular needs kdeinit4 for open file dialog since recently
* memory-deny-write-execute should be a safe addition for
desktop use of dnscrypt and unbound
* cleanup works
Diffstat (limited to 'etc/evince.profile')
-rw-r--r-- | etc/evince.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/evince.profile b/etc/evince.profile index 2c7c754d8..466260c49 100644 --- a/etc/evince.profile +++ b/etc/evince.profile | |||
@@ -15,6 +15,7 @@ include /etc/firejail/disable-programs.inc | |||
15 | include /etc/firejail/whitelist-var-common.inc | 15 | include /etc/firejail/whitelist-var-common.inc |
16 | 16 | ||
17 | caps.drop all | 17 | caps.drop all |
18 | # net none breaks AppArmor on Ubuntu systems | ||
18 | netfilter | 19 | netfilter |
19 | no3d | 20 | no3d |
20 | nodvd | 21 | nodvd |
@@ -28,7 +29,6 @@ protocol unix | |||
28 | seccomp | 29 | seccomp |
29 | shell none | 30 | shell none |
30 | tracelog | 31 | tracelog |
31 | # net none breaks AppArmor on Ubuntu systems | ||
32 | 32 | ||
33 | private-bin evince,evince-previewer,evince-thumbnailer | 33 | private-bin evince,evince-previewer,evince-thumbnailer |
34 | private-dev | 34 | private-dev |