diff options
author | netblue30 <netblue30@yahoo.com> | 2019-01-14 09:44:53 -0500 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2019-01-14 09:44:53 -0500 |
commit | ae3db84128503c16fd638b5c7bf9408d64ce14ba (patch) | |
tree | c9767454fa6a0555f3bd9784e6d5d7b7433b932e /etc/kmail.profile | |
parent | fix error message (diff) | |
download | firejail-ae3db84128503c16fd638b5c7bf9408d64ce14ba.tar.gz firejail-ae3db84128503c16fd638b5c7bf9408d64ce14ba.tar.zst firejail-ae3db84128503c16fd638b5c7bf9408d64ce14ba.zip |
adding mincore syscall to the default seccomp filter and some independent profiles
Diffstat (limited to 'etc/kmail.profile')
-rw-r--r-- | etc/kmail.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/kmail.profile b/etc/kmail.profile index 1f8403ef1..85eb74998 100644 --- a/etc/kmail.profile +++ b/etc/kmail.profile | |||
@@ -50,7 +50,7 @@ nou2f | |||
50 | novideo | 50 | novideo |
51 | protocol unix,inet,inet6,netlink | 51 | protocol unix,inet,inet6,netlink |
52 | # we need to allow chroot, io_getevents, ioprio_set, io_setup, io_submit system calls | 52 | # we need to allow chroot, io_getevents, ioprio_set, io_setup, io_submit system calls |
53 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | 53 | seccomp.drop mincore,@clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice |
54 | # tracelog | 54 | # tracelog |
55 | # writable-run-user is needed for signing and encrypting emails | 55 | # writable-run-user is needed for signing and encrypting emails |
56 | writable-run-user | 56 | writable-run-user |