diff options
| author |  smitsohu <smitsohu@gmail.com> | 2019-03-15 12:37:36 +0100 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2019-03-15 12:37:36 +0100 |
| commit | 529315fe17a526eb8200e42a44b57ddffbd7a838 (patch) | |
| tree | a70214750cdd46f0e6945d24a715ab19125a8244 /etc/patch.profile | |
| parent | ffmpegthumbnailer breaks in ranger with private-cache enabled from (#2596) (diff) | |
| download | firejail-529315fe17a526eb8200e42a44b57ddffbd7a838.tar.gz firejail-529315fe17a526eb8200e42a44b57ddffbd7a838.tar.zst firejail-529315fe17a526eb8200e42a44b57ddffbd7a838.zip | |
profile hardening: add disable-exec.inc in more places
Diffstat (limited to 'etc/patch.profile')
| -rw-r--r-- | etc/patch.profile | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/patch.profile b/etc/patch.profile index c0937bfc5..9515bffdf 100644 --- a/etc/patch.profile +++ b/etc/patch.profile | |||
| @@ -11,6 +11,7 @@ noblacklist ${DOCUMENTS} | |||
| 11 | 11 | ||
| 12 | include disable-common.inc | 12 | include disable-common.inc |
| 13 | include disable-devel.inc | 13 | include disable-devel.inc |
| 14 | include disable-exec.inc | ||
| 14 | include disable-interpreters.inc | 15 | include disable-interpreters.inc |
| 15 | include disable-passwdmgr.inc | 16 | include disable-passwdmgr.inc |
| 16 | include disable-xdg.inc | 17 | include disable-xdg.inc |
| @@ -39,5 +40,3 @@ private-dev | |||
| 39 | private-lib libfakeroot | 40 | private-lib libfakeroot |
| 40 | 41 | ||
| 41 | memory-deny-write-execute | 42 | memory-deny-write-execute |
| 42 | noexec ${HOME} | ||
| 43 | noexec /tmp | ||