diff options
| author |  netblue30 <netblue30@yahoo.com> | 2019-09-15 06:59:31 -0500 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2019-09-15 06:59:31 -0500 |
| commit | 99da7745bfd2a7c3a8c982e15b7d9b38e4df9b4b (patch) | |
| tree | aab0f8277a0ae1de922b8a9268b01428e8febd73 /etc/skypeforlinux.profile | |
| parent | Make sure that we are unprivileged before creating the trace log file. (diff) | |
| parent | Fix #2899 (diff) | |
| download | firejail-99da7745bfd2a7c3a8c982e15b7d9b38e4df9b4b.tar.gz firejail-99da7745bfd2a7c3a8c982e15b7d9b38e4df9b4b.tar.zst firejail-99da7745bfd2a7c3a8c982e15b7d9b38e4df9b4b.zip | |
Merge branch 'master' into fix-profile-builder
Diffstat (limited to 'etc/skypeforlinux.profile')
| -rw-r--r-- | etc/skypeforlinux.profile | 7 |
1 files changed, 2 insertions, 5 deletions
diff --git a/etc/skypeforlinux.profile b/etc/skypeforlinux.profile index 8a45f2465..341c25a95 100644 --- a/etc/skypeforlinux.profile +++ b/etc/skypeforlinux.profile | |||
| @@ -16,16 +16,13 @@ include disable-exec.inc | |||
| 16 | include disable-interpreters.inc | 16 | include disable-interpreters.inc |
| 17 | include disable-passwdmgr.inc | 17 | include disable-passwdmgr.inc |
| 18 | include disable-programs.inc | 18 | include disable-programs.inc |
| 19 | include disable-xdg.inc | ||
| 19 | 20 | ||
| 20 | caps.drop all | 21 | caps.keep sys_admin,sys_chroot |
| 21 | netfilter | 22 | netfilter |
| 22 | nodvd | 23 | nodvd |
| 23 | nogroups | 24 | nogroups |
| 24 | nonewprivs | ||
| 25 | noroot | ||
| 26 | notv | 25 | notv |
| 27 | protocol unix,inet,inet6,netlink | ||
| 28 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pivot_root,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | ||
| 29 | shell none | 26 | shell none |
| 30 | 27 | ||
| 31 | disable-mnt | 28 | disable-mnt |