diff options
author | rusty-snake <print_hello_world+Public@protonmail.com> | 2019-06-16 13:42:48 +0200 |
---|---|---|
committer | rusty-snake <print_hello_world+Public@protonmail.com> | 2019-06-16 13:42:48 +0200 |
commit | 913ab0b418c561ab29d78ef4b689eaf75c3f5d8c (patch) | |
tree | 9a44ea31f52e2b0c78564bf29b490e0c2e56c218 /etc/kmail.profile | |
parent | move noblacklist ~/.java to allow-java.inc (diff) | |
download | firejail-913ab0b418c561ab29d78ef4b689eaf75c3f5d8c.tar.gz firejail-913ab0b418c561ab29d78ef4b689eaf75c3f5d8c.tar.zst firejail-913ab0b418c561ab29d78ef4b689eaf75c3f5d8c.zip |
consequent order of writable-*
Diffstat (limited to 'etc/kmail.profile')
-rw-r--r-- | etc/kmail.profile | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/etc/kmail.profile b/etc/kmail.profile index 009b2c063..0b602c79a 100644 --- a/etc/kmail.profile +++ b/etc/kmail.profile | |||
@@ -53,9 +53,8 @@ protocol unix,inet,inet6,netlink | |||
53 | # we need to allow chroot, io_getevents, ioprio_set, io_setup, io_submit system calls | 53 | # we need to allow chroot, io_getevents, ioprio_set, io_setup, io_submit system calls |
54 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | 54 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice |
55 | # tracelog | 55 | # tracelog |
56 | # writable-run-user is needed for signing and encrypting emails | ||
57 | writable-run-user | ||
58 | 56 | ||
59 | private-dev | 57 | private-dev |
60 | # private-tmp - interrupts connection to akonadi, breaks opening of email attachments | 58 | # private-tmp - interrupts connection to akonadi, breaks opening of email attachments |
61 | 59 | # writable-run-user is needed for signing and encrypting emails | |
60 | writable-run-user | ||