Hardening compressors (#2594)

* Harden atool

* Harden cpio

* Fix ordering in private-* options

* Harden gzip

* Harden tar

* Harden bsdtar

* Harden+ tar

* Harden+ gzip

* Harden+ cpio

* Create bzip2.profile

* Description for bunzip2

* Add bzip2/bunzip2 to firecfg

1 files changed, 12 insertions, 0 deletions

diff --git a/etc/gzip.profile b/etc/gzip.profile
index 49c43a49c..27e262f87 100644
--- a/etc/gzip.profile
+++ b/etc/gzip.profile
@@ -9,11 +9,20 @@ include globals.local
 
 blacklist /tmp/.X11-unix
 
+include disable-exec.inc
+include disable-interpreters.inc
+
 ignore noroot
+
+apparmor
+hostname gzip
+ipc-namespace
+machine-id
 net none
 no3d
 nodbus
 nodvd
+nogroups
 nosound
 notv
 nou2f
@@ -21,6 +30,9 @@ novideo
 shell none
 tracelog
 
+private-cache
 private-dev
 
+memory-deny-write-execute
+
 include default.profile