diff options
author | smitsohu <smitsohu@gmail.com> | 2018-03-13 18:22:31 +0100 |
---|---|---|
committer | smitsohu <smitsohu@gmail.com> | 2018-03-13 18:22:31 +0100 |
commit | 94af430d9f4ced938315b079bdc62313b7b8152c (patch) | |
tree | 4ad3302b2dc7333e7061d4484baa0b2ac5905c41 /etc/falkon.profile | |
parent | fix unbound (ip-transparent option) - #1731 (diff) | |
download | firejail-94af430d9f4ced938315b079bdc62313b7b8152c.tar.gz firejail-94af430d9f4ced938315b079bdc62313b7b8152c.tar.zst firejail-94af430d9f4ced938315b079bdc62313b7b8152c.zip |
Diffstat (limited to 'etc/falkon.profile')
-rw-r--r-- | etc/falkon.profile | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/etc/falkon.profile b/etc/falkon.profile index 03484382a..a86c83329 100644 --- a/etc/falkon.profile +++ b/etc/falkon.profile | |||
@@ -27,11 +27,12 @@ nonewprivs | |||
27 | noroot | 27 | noroot |
28 | notv | 28 | notv |
29 | protocol unix,inet,inet6,netlink | 29 | protocol unix,inet,inet6,netlink |
30 | seccomp | 30 | # blacklisting of chroot system calls breaks falkon |
31 | tracelog | 31 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice |
32 | # tracelog | ||
32 | 33 | ||
33 | private-dev | 34 | private-dev |
34 | private-tmp | 35 | # private-tmp - interferes with the opening of downloaded files |
35 | 36 | ||
36 | noexec ${HOME} | 37 | noexec ${HOME} |
37 | noexec /tmp | 38 | noexec /tmp |