diff options
| author |  valoq <valoq@mailbox.org> | 2016-12-21 10:34:28 +0100 |
|---|---|---|
| committer | valoq <valoq@mailbox.org> | 2016-12-21 10:34:28 +0100 |
| commit | 77a97aae04c6ed92cc13779d6b4c25a5155a7315 (patch) | |
| tree | f43e3847c68ccff9ec5037293f7858dc82f257e2 /etc/git.profile | |
| parent | hardened various profiles (diff) | |
| download | firejail-77a97aae04c6ed92cc13779d6b4c25a5155a7315.tar.gz firejail-77a97aae04c6ed92cc13779d6b4c25a5155a7315.tar.zst firejail-77a97aae04c6ed92cc13779d6b4c25a5155a7315.zip | |
profile improvements
Diffstat (limited to 'etc/git.profile')
| -rw-r--r-- | etc/git.profile | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/etc/git.profile b/etc/git.profile index d60e58c03..80e534e20 100644 --- a/etc/git.profile +++ b/etc/git.profile | |||
| @@ -12,15 +12,17 @@ include /etc/firejail/disable-common.inc | |||
| 12 | include /etc/firejail/disable-programs.inc | 12 | include /etc/firejail/disable-programs.inc |
| 13 | include /etc/firejail/disable-passwdmgr.inc | 13 | include /etc/firejail/disable-passwdmgr.inc |
| 14 | 14 | ||
| 15 | |||
| 16 | caps.drop all | 15 | caps.drop all |
| 17 | netfilter | 16 | netfilter |
| 18 | nogroups | 17 | nogroups |
| 19 | nonewprivs | 18 | nonewprivs |
| 20 | noroot | 19 | noroot |
| 21 | nosound | 20 | nosound |
| 21 | no3d | ||
| 22 | protocol unix,inet,inet6 | 22 | protocol unix,inet,inet6 |
| 23 | seccomp | 23 | seccomp |
| 24 | shell none | 24 | shell none |
| 25 | 25 | ||
| 26 | blacklist /tmp/.X11-unix | ||
| 27 | |||
| 26 | private-dev | 28 | private-dev |