many profile cleanups

1 files changed, 9 insertions, 4 deletions

diff --git a/etc/gzip.profile b/etc/gzip.profile
index 27e262f87..810684eae 100644
--- a/etc/gzip.profile
+++ b/etc/gzip.profile
@@ -9,12 +9,15 @@ include globals.local
 
 blacklist /tmp/.X11-unix
 
+include disable-common.inc
+include disable-devel.inc
 include disable-exec.inc
 include disable-interpreters.inc
-
-ignore noroot
+include disable-passwdmgr.inc
+include disable-programs.inc
 
 apparmor
+caps.drop all
 hostname gzip
 ipc-namespace
 machine-id
@@ -23,10 +26,14 @@ no3d
 nodbus
 nodvd
 nogroups
+nonewprivs
+#noroot
 nosound
 notv
 nou2f
 novideo
+protocol unix
+seccomp
 shell none
 tracelog
 
@@ -34,5 +41,3 @@ private-cache
 private-dev
 
 memory-deny-write-execute
-
-include default.profile