diff options
| author |  Tad <tad@spotco.us> | 2018-09-19 15:32:18 -0400 |
|---|---|---|
| committer | Tad <tad@spotco.us> | 2018-09-19 15:32:48 -0400 |
| commit | c0ba48bec1bc11c98cbac3c6cc9fdf117dcb98d1 (patch) | |
| tree | 83e0f2b4020db3c9ae6c0501aab2d30f56df086e /etc/minetest.profile | |
| parent | 0.9.56 released (diff) | |
| download | firejail-c0ba48bec1bc11c98cbac3c6cc9fdf117dcb98d1.tar.gz firejail-c0ba48bec1bc11c98cbac3c6cc9fdf117dcb98d1.tar.zst firejail-c0ba48bec1bc11c98cbac3c6cc9fdf117dcb98d1.zip | |
Misc profile hardening
Diffstat (limited to 'etc/minetest.profile')
| -rw-r--r-- | etc/minetest.profile | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/minetest.profile b/etc/minetest.profile index 7de546791..3e06b6d30 100644 --- a/etc/minetest.profile +++ b/etc/minetest.profile | |||
| @@ -17,10 +17,12 @@ include /etc/firejail/disable-programs.inc | |||
| 17 | mkdir ${HOME}/.minetest | 17 | mkdir ${HOME}/.minetest |
| 18 | whitelist ${HOME}/.minetest | 18 | whitelist ${HOME}/.minetest |
| 19 | include /etc/firejail/whitelist-common.inc | 19 | include /etc/firejail/whitelist-common.inc |
| 20 | include /etc/firejail/whitelist-var-common.inc | ||
| 20 | 21 | ||
| 21 | caps.drop all | 22 | caps.drop all |
| 22 | ipc-namespace | 23 | ipc-namespace |
| 23 | netfilter | 24 | netfilter |
| 25 | nodbus | ||
| 24 | nodvd | 26 | nodvd |
| 25 | nogroups | 27 | nogroups |
| 26 | nonewprivs | 28 | nonewprivs |