diff options
author | smitsohu <smitsohu@gmail.com> | 2018-12-09 16:17:21 +0100 |
---|---|---|
committer | smitsohu <smitsohu@gmail.com> | 2018-12-09 20:13:20 +0100 |
commit | 0817f1556d6d55e057d1d6bc44467ea60bdcad3a (patch) | |
tree | 9ad8f5ae96ac77e22540bb4dda8e851de121daf4 /etc/libreoffice.profile | |
parent | merges (diff) | |
download | firejail-0817f1556d6d55e057d1d6bc44467ea60bdcad3a.tar.gz firejail-0817f1556d6d55e057d1d6bc44467ea60bdcad3a.tar.zst firejail-0817f1556d6d55e057d1d6bc44467ea60bdcad3a.zip |
enable apparmor in libreoffice profile
depends on aa37fe19fed6be8e44db461691149237ee71da94
Diffstat (limited to 'etc/libreoffice.profile')
-rw-r--r-- | etc/libreoffice.profile | 18 |
1 files changed, 11 insertions, 7 deletions
diff --git a/etc/libreoffice.profile b/etc/libreoffice.profile index 1a3f6cbd1..102760513 100644 --- a/etc/libreoffice.profile +++ b/etc/libreoffice.profile | |||
@@ -24,23 +24,27 @@ include disable-programs.inc | |||
24 | 24 | ||
25 | include whitelist-var-common.inc | 25 | include whitelist-var-common.inc |
26 | 26 | ||
27 | # Ubuntu 18.04 uses its own apparmor profile | 27 | # ubuntu 18.04 comes with its own apparmor profile, but it is not in enforce mode. |
28 | # uncomment the next line if you are not on Ubuntu | 28 | # comment the next line to use the ubuntu profile instead of firejail's apparmor profile |
29 | #apparmor | 29 | apparmor |
30 | caps.drop all | 30 | caps.drop all |
31 | machine-id | 31 | machine-id |
32 | netfilter | 32 | netfilter |
33 | #nodbus | 33 | #nodbus |
34 | nodvd | 34 | nodvd |
35 | nogroups | 35 | nogroups |
36 | #nonewprivs - fix for Ubuntu 18.04/Debian 10 | 36 | # comment nonewprivs when using the ubuntu 18.04/debian 10 apparmor profile |
37 | nonewprivs | ||
37 | noroot | 38 | noroot |
38 | notv | 39 | notv |
39 | nou2f | 40 | nou2f |
40 | #protocol unix,inet,inet6 - fix for Ubuntu 18.04/Debian 10 | 41 | # comment the protocol line when using the ubuntu 18.04/debian 10 apparmor profile |
41 | #seccomp - fix for Ubuntu 18.04/Debian 10 | 42 | protocol unix,inet,inet6 |
43 | # comment seccomp when using the ubuntu 18.04/debian 10 apparmor profile | ||
44 | seccomp | ||
42 | shell none | 45 | shell none |
43 | #tracelog - problems reported by Ubuntu 18.04 apparmor profile in /var/log/syslog | 46 | # comment tracelog when using the ubuntu 18.04/debian 10 apparmor profile |
47 | tracelog | ||
44 | 48 | ||
45 | private-dev | 49 | private-dev |
46 | private-tmp | 50 | private-tmp |