diff options
| author |  smitsohu <smitsohu@gmail.com> | 2017-09-25 15:57:50 +0200 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2017-09-25 15:57:50 +0200 |
| commit | 9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2 (patch) | |
| tree | 632cecd6b845ecc93c5024170671a9894c2cda49 /etc/evince.profile | |
| parent | fix nginx and apache2, possible fix for #1534 (diff) | |
| download | firejail-9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2.tar.gz firejail-9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2.tar.zst firejail-9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2.zip | |
various profile enhancements
* okular needs kdeinit4 for open file dialog since recently
* memory-deny-write-execute should be a safe addition for
desktop use of dnscrypt and unbound
* cleanup works
Diffstat (limited to 'etc/evince.profile')
| -rw-r--r-- | etc/evince.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/evince.profile b/etc/evince.profile index 2c7c754d8..466260c49 100644 --- a/etc/evince.profile +++ b/etc/evince.profile | |||
| @@ -15,6 +15,7 @@ include /etc/firejail/disable-programs.inc | |||
| 15 | include /etc/firejail/whitelist-var-common.inc | 15 | include /etc/firejail/whitelist-var-common.inc |
| 16 | 16 | ||
| 17 | caps.drop all | 17 | caps.drop all |
| 18 | # net none breaks AppArmor on Ubuntu systems | ||
| 18 | netfilter | 19 | netfilter |
| 19 | no3d | 20 | no3d |
| 20 | nodvd | 21 | nodvd |
| @@ -28,7 +29,6 @@ protocol unix | |||
| 28 | seccomp | 29 | seccomp |
| 29 | shell none | 30 | shell none |
| 30 | tracelog | 31 | tracelog |
| 31 | # net none breaks AppArmor on Ubuntu systems | ||
| 32 | 32 | ||
| 33 | private-bin evince,evince-previewer,evince-thumbnailer | 33 | private-bin evince,evince-previewer,evince-thumbnailer |
| 34 | private-dev | 34 | private-dev |