diff options
| author |  root <root@HP.yukino.local> | 2016-06-25 15:57:38 +0400 |
|---|---|---|
| committer | root <root@HP.yukino.local> | 2016-06-25 15:57:38 +0400 |
| commit | b92cae3a9222decc4aebb447a44ffa127cedd3be (patch) | |
| tree | 8f03e6a24ebe1698159e7e94f6020697d76db8b8 /etc/gzip.profile | |
| parent | updated syscall list (diff) | |
| download | firejail-b92cae3a9222decc4aebb447a44ffa127cedd3be.tar.gz firejail-b92cae3a9222decc4aebb447a44ffa127cedd3be.tar.zst firejail-b92cae3a9222decc4aebb447a44ffa127cedd3be.zip | |
Committer: Paupiah Yashvi <yash@hackers.mu>
Desctiption: Gzip sandbox profile for decompression
Changes to be committed:
new file: gzip.profile
Diffstat (limited to 'etc/gzip.profile')
| -rw-r--r-- | etc/gzip.profile | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/etc/gzip.profile b/etc/gzip.profile new file mode 100644 index 000000000..f231c3780 --- /dev/null +++ b/etc/gzip.profile | |||
| @@ -0,0 +1,19 @@ | |||
| 1 | ################################ | ||
| 2 | # Gzip profile | ||
| 3 | ################################ | ||
| 4 | include /etc/firejail/disable-common.inc | ||
| 5 | include /etc/firejail/disable-programs.inc | ||
| 6 | include /etc/firejail/disable-passwdmgr.inc | ||
| 7 | |||
| 8 | blacklist ${HOME}/.wine | ||
| 9 | blacklist ${HOME}/.ssh | ||
| 10 | |||
| 11 | tracelog | ||
| 12 | caps.drop all | ||
| 13 | seccomp | ||
| 14 | net none | ||
| 15 | noroot | ||
| 16 | nosound | ||
| 17 | nogroups | ||
| 18 | nonewprivs | ||
| 19 | |||