diff options
| author |  smitsohu <smitsohu@gmail.com> | 2019-03-15 12:37:36 +0100 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2019-03-15 12:37:36 +0100 |
| commit | 529315fe17a526eb8200e42a44b57ddffbd7a838 (patch) | |
| tree | a70214750cdd46f0e6945d24a715ab19125a8244 /etc/freshclam.profile | |
| parent | ffmpegthumbnailer breaks in ranger with private-cache enabled from (#2596) (diff) | |
| download | firejail-529315fe17a526eb8200e42a44b57ddffbd7a838.tar.gz firejail-529315fe17a526eb8200e42a44b57ddffbd7a838.tar.zst firejail-529315fe17a526eb8200e42a44b57ddffbd7a838.zip | |
profile hardening: add disable-exec.inc in more places
Diffstat (limited to 'etc/freshclam.profile')
| -rw-r--r-- | etc/freshclam.profile | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/freshclam.profile b/etc/freshclam.profile index 2dd55d8cc..2bab79e2e 100644 --- a/etc/freshclam.profile +++ b/etc/freshclam.profile | |||
| @@ -6,6 +6,7 @@ include clamav.local | |||
| 6 | # Persistent global definitions | 6 | # Persistent global definitions |
| 7 | include globals.local | 7 | include globals.local |
| 8 | 8 | ||
| 9 | include disable-exec.inc | ||
| 9 | 10 | ||
| 10 | caps.keep setgid,setuid | 11 | caps.keep setgid,setuid |
| 11 | ipc-namespace | 12 | ipc-namespace |
| @@ -32,5 +33,3 @@ writable-var | |||
| 32 | writable-var-log | 33 | writable-var-log |
| 33 | 34 | ||
| 34 | memory-deny-write-execute | 35 | memory-deny-write-execute |
| 35 | noexec ${HOME} | ||
| 36 | noexec /tmp | ||