diff options
| author |  Tad <tad@spotco.us> | 2019-03-02 16:58:42 -0500 |
|---|---|---|
| committer | Tad <tad@spotco.us> | 2019-03-02 17:01:44 -0500 |
| commit | d9f121c1fc0babe2c8aa176f2322459ef37a42f1 (patch) | |
| tree | 6ef4d8e204a0259c150fdc32d0097e77c330784e /etc/gucharmap.profile | |
| parent | Many profile fixes + merges (diff) | |
| download | firejail-d9f121c1fc0babe2c8aa176f2322459ef37a42f1.tar.gz firejail-d9f121c1fc0babe2c8aa176f2322459ef37a42f1.tar.zst firejail-d9f121c1fc0babe2c8aa176f2322459ef37a42f1.zip | |
More profile fixes
Diffstat (limited to 'etc/gucharmap.profile')
| -rw-r--r-- | etc/gucharmap.profile | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/etc/gucharmap.profile b/etc/gucharmap.profile index c85424de9..b1bd59307 100644 --- a/etc/gucharmap.profile +++ b/etc/gucharmap.profile | |||
| @@ -14,6 +14,9 @@ include disable-passwdmgr.inc | |||
| 14 | include disable-programs.inc | 14 | include disable-programs.inc |
| 15 | include disable-xdg.inc | 15 | include disable-xdg.inc |
| 16 | 16 | ||
| 17 | include whitelist-common.inc | ||
| 18 | include whitelist-var-common.inc | ||
| 19 | |||
| 17 | apparmor | 20 | apparmor |
| 18 | caps.drop all | 21 | caps.drop all |
| 19 | machine-id | 22 | machine-id |
| @@ -32,8 +35,6 @@ seccomp | |||
| 32 | shell none | 35 | shell none |
| 33 | 36 | ||
| 34 | disable-mnt | 37 | disable-mnt |
| 35 | # for GTK theme support comment 'private' | ||
| 36 | private | ||
| 37 | private-cache | 38 | private-cache |
| 38 | private-dev | 39 | private-dev |
| 39 | private-tmp | 40 | private-tmp |
| @@ -42,5 +43,4 @@ memory-deny-write-execute | |||
| 42 | noexec ${HOME} | 43 | noexec ${HOME} |
| 43 | noexec /tmp | 44 | noexec /tmp |
| 44 | 45 | ||
| 45 | # gucharmap will never write anything | ||
| 46 | read-only ${HOME} | 46 | read-only ${HOME} |