diff options
| author |  Fred-Barclay <Fred-Barclay@users.noreply.github.com> | 2017-11-18 20:25:56 -0600 |
|---|---|---|
| committer | Fred-Barclay <Fred-Barclay@users.noreply.github.com> | 2017-11-18 20:25:56 -0600 |
| commit | 1663b3d5fdb00f6984078e276b87217033ed1f14 (patch) | |
| tree | eceaac1e21e08d067a6ca2e3746a0e094d38c173 /etc/qtox.profile | |
| parent | some profile improvements (diff) | |
| download | firejail-1663b3d5fdb00f6984078e276b87217033ed1f14.tar.gz firejail-1663b3d5fdb00f6984078e276b87217033ed1f14.tar.zst firejail-1663b3d5fdb00f6984078e276b87217033ed1f14.zip | |
More qtox profile tightening
Diffstat (limited to 'etc/qtox.profile')
| -rw-r--r-- | etc/qtox.profile | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/qtox.profile b/etc/qtox.profile index 917e2cde8..256c4d374 100644 --- a/etc/qtox.profile +++ b/etc/qtox.profile | |||
| @@ -19,8 +19,10 @@ whitelist ${DOWNLOADS} | |||
| 19 | whitelist ${HOME}/.config/qt5ct | 19 | whitelist ${HOME}/.config/qt5ct |
| 20 | whitelist ${HOME}/.config/tox | 20 | whitelist ${HOME}/.config/tox |
| 21 | include /etc/firejail/whitelist-common.inc | 21 | include /etc/firejail/whitelist-common.inc |
| 22 | include /etc/firejail/whitelist-var-common.inc | ||
| 22 | 23 | ||
| 23 | caps.drop all | 24 | caps.drop all |
| 25 | ipc-namespace | ||
| 24 | netfilter | 26 | netfilter |
| 25 | nodvd | 27 | nodvd |
| 26 | nogroups | 28 | nogroups |
| @@ -34,6 +36,7 @@ tracelog | |||
| 34 | 36 | ||
| 35 | disable-mnt | 37 | disable-mnt |
| 36 | private-bin qtox | 38 | private-bin qtox |
| 39 | private-etc fonts,resolv.conf | ||
| 37 | private-dev | 40 | private-dev |
| 38 | private-tmp | 41 | private-tmp |
| 39 | 42 | ||