diff options
| author |  Tad <tad@spotco.us> | 2018-11-22 13:50:48 -0500 |
|---|---|---|
| committer | Tad <tad@spotco.us> | 2018-11-22 13:50:48 -0500 |
| commit | cc898c19023a9aea92bc7e863f8fd46600d27598 (patch) | |
| tree | 8dcaab722a48b4fe44ddd2b4e7f9c02116d528b0 /etc/sol.profile | |
| parent | playonlinux.profile: allow python (diff) | |
| download | firejail-cc898c19023a9aea92bc7e863f8fd46600d27598.tar.gz firejail-cc898c19023a9aea92bc7e863f8fd46600d27598.tar.zst firejail-cc898c19023a9aea92bc7e863f8fd46600d27598.zip | |
Aisleriot fixes + add profile for FeedReader
Diffstat (limited to 'etc/sol.profile')
| -rw-r--r-- | etc/sol.profile | 12 |
1 files changed, 4 insertions, 8 deletions
diff --git a/etc/sol.profile b/etc/sol.profile index c0ad3c739..e5a356f68 100644 --- a/etc/sol.profile +++ b/etc/sol.profile | |||
| @@ -15,13 +15,12 @@ include disable-xdg.inc | |||
| 15 | # all necessary files in $HOME are in whitelist-common.inc | 15 | # all necessary files in $HOME are in whitelist-common.inc |
| 16 | include whitelist-common.inc | 16 | include whitelist-common.inc |
| 17 | include whitelist-var-common.inc | 17 | include whitelist-var-common.inc |
| 18 | net none | ||
| 19 | 18 | ||
| 20 | caps.drop all | 19 | caps.drop all |
| 21 | # ipc-namespace | 20 | ipc-namespace |
| 22 | # netfilter | 21 | net none |
| 23 | # no3d | 22 | # no3d |
| 24 | # nodbus | 23 | nodbus |
| 25 | nodvd | 24 | nodvd |
| 26 | nogroups | 25 | nogroups |
| 27 | nonewprivs | 26 | nonewprivs |
| @@ -35,12 +34,9 @@ seccomp | |||
| 35 | shell none | 34 | shell none |
| 36 | 35 | ||
| 37 | disable-mnt | 36 | disable-mnt |
| 38 | # private | ||
| 39 | private-bin sol | 37 | private-bin sol |
| 40 | # private-cache | 38 | private-cache |
| 41 | private-dev | 39 | private-dev |
| 42 | # private-etc none | ||
| 43 | # private-lib | ||
| 44 | private-tmp | 40 | private-tmp |
| 45 | 41 | ||
| 46 | memory-deny-write-execute | 42 | memory-deny-write-execute |