diff options
author | netblue30 <netblue30@yahoo.com> | 2019-01-23 11:48:39 -0500 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2019-01-23 11:48:39 -0500 |
commit | d69d2968066b8be3434864c7bbe7d6ead6ae41d3 (patch) | |
tree | 2a7cc6478dbb654384569b9571008ccd197aaa53 /etc/kmail.profile | |
parent | improve gwenview and dolphin profiles - #2306 #2348 (diff) | |
download | firejail-d69d2968066b8be3434864c7bbe7d6ead6ae41d3.tar.gz firejail-d69d2968066b8be3434864c7bbe7d6ead6ae41d3.tar.zst firejail-d69d2968066b8be3434864c7bbe7d6ead6ae41d3.zip |
removed mincore syscall from default seccomp filter
Diffstat (limited to 'etc/kmail.profile')
-rw-r--r-- | etc/kmail.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/kmail.profile b/etc/kmail.profile index 85eb74998..1f8403ef1 100644 --- a/etc/kmail.profile +++ b/etc/kmail.profile | |||
@@ -50,7 +50,7 @@ nou2f | |||
50 | novideo | 50 | novideo |
51 | protocol unix,inet,inet6,netlink | 51 | protocol unix,inet,inet6,netlink |
52 | # we need to allow chroot, io_getevents, ioprio_set, io_setup, io_submit system calls | 52 | # we need to allow chroot, io_getevents, ioprio_set, io_setup, io_submit system calls |
53 | seccomp.drop mincore,@clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | 53 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice |
54 | # tracelog | 54 | # tracelog |
55 | # writable-run-user is needed for signing and encrypting emails | 55 | # writable-run-user is needed for signing and encrypting emails |
56 | writable-run-user | 56 | writable-run-user |