diff options
| author |  rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2020-05-02 17:58:02 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2020-05-02 17:58:02 +0000 |
| commit | 49280197ccf830b708b1b7c4d6fb8b3590f44da2 (patch) | |
| tree | 76ae21d4faa96a2970738aedc693b6b9ed3183c8 /etc/profile-m-z/supertux2.profile | |
| parent | fixes for zeal.profile (diff) | |
| download | firejail-49280197ccf830b708b1b7c4d6fb8b3590f44da2.tar.gz firejail-49280197ccf830b708b1b7c4d6fb8b3590f44da2.tar.zst firejail-49280197ccf830b708b1b7c4d6fb8b3590f44da2.zip | |
various hardening (#3394)
Diffstat (limited to 'etc/profile-m-z/supertux2.profile')
| -rw-r--r-- | etc/profile-m-z/supertux2.profile | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/etc/profile-m-z/supertux2.profile b/etc/profile-m-z/supertux2.profile index e1cdb114c..ceaae8fbf 100644 --- a/etc/profile-m-z/supertux2.profile +++ b/etc/profile-m-z/supertux2.profile | |||
| @@ -14,10 +14,14 @@ include disable-exec.inc | |||
| 14 | include disable-interpreters.inc | 14 | include disable-interpreters.inc |
| 15 | include disable-passwdmgr.inc | 15 | include disable-passwdmgr.inc |
| 16 | include disable-programs.inc | 16 | include disable-programs.inc |
| 17 | include disable-xdg.inc | ||
| 17 | 18 | ||
| 18 | mkdir ${HOME}/.local/share/supertux2 | 19 | mkdir ${HOME}/.local/share/supertux2 |
| 19 | whitelist ${HOME}/.local/share/supertux2 | 20 | whitelist ${HOME}/.local/share/supertux2 |
| 21 | whitelist /usr/share/supertux2 | ||
| 20 | include whitelist-common.inc | 22 | include whitelist-common.inc |
| 23 | include whitelist-runuser-common.inc | ||
| 24 | include whitelist-usr-share-common.inc | ||
| 21 | include whitelist-var-common.inc | 25 | include whitelist-var-common.inc |
| 22 | 26 | ||
| 23 | apparmor | 27 | apparmor |
| @@ -33,6 +37,7 @@ novideo | |||
| 33 | protocol unix,netlink | 37 | protocol unix,netlink |
| 34 | seccomp | 38 | seccomp |
| 35 | shell none | 39 | shell none |
| 40 | tracelog | ||
| 36 | 41 | ||
| 37 | disable-mnt | 42 | disable-mnt |
| 38 | # private-bin supertux2 | 43 | # private-bin supertux2 |