diff options
| author |  Tad <tad@spotco.us> | 2017-04-16 07:14:01 -0400 |
|---|---|---|
| committer | Tad <tad@spotco.us> | 2017-04-16 08:12:31 -0400 |
| commit | b5f29f9c216615c39e6fe00508ea18a52a2fe88a (patch) | |
| tree | c43aea948b2d8e82ea1b157e61bbfcbf92c801fc /etc/firefox.profile | |
| parent | doc update (diff) | |
| download | firejail-b5f29f9c216615c39e6fe00508ea18a52a2fe88a.tar.gz firejail-b5f29f9c216615c39e6fe00508ea18a52a2fe88a.tar.zst firejail-b5f29f9c216615c39e6fe00508ea18a52a2fe88a.zip | |
Harden 9 more profiles
Diffstat (limited to 'etc/firefox.profile')
| -rw-r--r-- | etc/firefox.profile | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/firefox.profile b/etc/firefox.profile index 1bc3eb769..4d96c05c8 100644 --- a/etc/firefox.profile +++ b/etc/firefox.profile | |||
| @@ -21,6 +21,7 @@ nonewprivs | |||
| 21 | noroot | 21 | noroot |
| 22 | protocol unix,inet,inet6,netlink | 22 | protocol unix,inet,inet6,netlink |
| 23 | seccomp | 23 | seccomp |
| 24 | shell none | ||
| 24 | tracelog | 25 | tracelog |
| 25 | 26 | ||
| 26 | whitelist ${DOWNLOADS} | 27 | whitelist ${DOWNLOADS} |
| @@ -59,3 +60,6 @@ include /etc/firejail/whitelist-common.inc | |||
| 59 | #private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,xdg,gtk-2.0,gtk-3.0,X11,pango,fonts,firefox,mime.types,mailcap,asound.conf,pulse | 60 | #private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,xdg,gtk-2.0,gtk-3.0,X11,pango,fonts,firefox,mime.types,mailcap,asound.conf,pulse |
| 60 | private-dev | 61 | private-dev |
| 61 | private-tmp | 62 | private-tmp |
| 63 | |||
| 64 | noexec ${HOME} | ||
| 65 | noexec /tmp | ||