diff options
author | 2017-04-18 07:23:57 -0400 | |
---|---|---|
committer | 2017-04-18 07:23:57 -0400 | |
commit | 7d4e6a5d607cd78d4ec5753c0af4463135e387f5 (patch) | |
tree | a0d279d7fd89a9550f8b011eeed42f7d467717ea /etc/firefox.profile | |
parent | Merge pull request #1229 from SpotComms/firecfg2 (diff) | |
parent | Harden some more profiles (diff) | |
download | firejail-7d4e6a5d607cd78d4ec5753c0af4463135e387f5.tar.gz firejail-7d4e6a5d607cd78d4ec5753c0af4463135e387f5.tar.zst firejail-7d4e6a5d607cd78d4ec5753c0af4463135e387f5.zip |
Merge pull request #1232 from SpotComms/harden3
Harden more profiles
Diffstat (limited to 'etc/firefox.profile')
-rw-r--r-- | etc/firefox.profile | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/firefox.profile b/etc/firefox.profile index 4d96c05c8..0013062a5 100644 --- a/etc/firefox.profile +++ b/etc/firefox.profile | |||
@@ -16,7 +16,9 @@ include /etc/firejail/disable-programs.inc | |||
16 | include /etc/firejail/disable-devel.inc | 16 | include /etc/firejail/disable-devel.inc |
17 | 17 | ||
18 | caps.drop all | 18 | caps.drop all |
19 | ipc-namespace | ||
19 | netfilter | 20 | netfilter |
21 | nogroups | ||
20 | nonewprivs | 22 | nonewprivs |
21 | noroot | 23 | noroot |
22 | protocol unix,inet,inet6,netlink | 24 | protocol unix,inet,inet6,netlink |