aboutsummaryrefslogtreecommitdiffstats
path: root/etc/strings.profile
diff options
context:
space:
mode:
authorLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2019-06-02 14:09:20 +0200
committerLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2019-06-02 14:09:20 +0200
commit217d0e259470ed004db45b3508b03688556dc44a (patch)
treeff9a08ee14665cb995f24f0ac5a4dd0e079fccf4 /etc/strings.profile
parentMerge branch 'master' of github.com:netblue30/firejail (diff)
downloadfirejail-217d0e259470ed004db45b3508b03688556dc44a.tar.gz
firejail-217d0e259470ed004db45b3508b03688556dc44a.tar.zst
firejail-217d0e259470ed004db45b3508b03688556dc44a.zip
many profile cleanups
Diffstat (limited to 'etc/strings.profile')
-rw-r--r--etc/strings.profile23
1 files changed, 18 insertions, 5 deletions
diff --git a/etc/strings.profile b/etc/strings.profile
index 0caecdf7b..ace0d9351 100644
--- a/etc/strings.profile
+++ b/etc/strings.profile
@@ -4,30 +4,43 @@ quiet
4# Persistent local customizations 4# Persistent local customizations
5include strings.local 5include strings.local
6# Persistent global definitions 6# Persistent global definitions
7# added by included profile 7include globals.local
8#include globals.local
9 8
10blacklist /tmp/.X11-unix 9blacklist /tmp/.X11-unix
10
11include disable-common.inc
12include disable-devel.inc
11include disable-exec.inc 13include disable-exec.inc
14include disable-interpreters.inc
15include disable-passwdmgr.inc
16include disable-programs.inc
12 17
13ignore noroot 18apparmor
19caps.drop all
20ipc-namespace
21machine-id
14net none 22net none
15no3d 23no3d
16nodbus 24nodbus
17nodvd 25nodvd
26nogroups
27nonewprivs
28#noroot
18nosound 29nosound
19notv 30notv
20nou2f 31nou2f
21novideo 32novideo
33protocol unix
34seccomp
22shell none 35shell none
23tracelog 36tracelog
24 37
38#private
25private-bin strings 39private-bin strings
26private-cache 40private-cache
27private-dev 41private-dev
28private-etc alternatives 42private-etc alternatives
29private-lib libfakeroot 43private-lib libfakeroot
44private-tmp
30 45
31memory-deny-write-execute 46memory-deny-write-execute
32
33include default.profile