diff options
| author |  rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2020-11-16 11:41:35 +0100 |
|---|---|---|
| committer | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2020-11-16 11:41:35 +0100 |
| commit | 096d0de5f8bb253d0c1035796464bc5982f06f81 (patch) | |
| tree | d9634d1c26afca63ada52f66dd55eb09a46647dd /etc/templates | |
| parent | Add XAUTHORITY file of sddm from openSUSE Tumblew… (diff) | |
| download | firejail-096d0de5f8bb253d0c1035796464bc5982f06f81.tar.gz firejail-096d0de5f8bb253d0c1035796464bc5982f06f81.tar.zst firejail-096d0de5f8bb253d0c1035796464bc5982f06f81.zip | |
from my overrides
- add seccomp.block-secondary to a lot profiles
- add wruc to firefox-common and ignore it in TB and
firefox-common-addons
- harden dia, gnome-keyring, libreoffice, megaglest, pngquant,
ghostwriter, rhythmbox, sqlitebrowser
Diffstat (limited to 'etc/templates')
| -rw-r--r-- | etc/templates/profile.template | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/templates/profile.template b/etc/templates/profile.template index d57306aee..3d37fc827 100644 --- a/etc/templates/profile.template +++ b/etc/templates/profile.template | |||
| @@ -157,6 +157,7 @@ include globals.local | |||
| 157 | #seccomp | 157 | #seccomp |
| 158 | ##seccomp !chroot | 158 | ##seccomp !chroot |
| 159 | ##seccomp.drop SYSCALLS (see syscalls.txt) | 159 | ##seccomp.drop SYSCALLS (see syscalls.txt) |
| 160 | #seccomp.block-secondary | ||
| 160 | #shell none | 161 | #shell none |
| 161 | #tracelog | 162 | #tracelog |
| 162 | # Prefer 'x11 none' instead of 'blacklist /tmp/.X11-unix' if 'net none' is set | 163 | # Prefer 'x11 none' instead of 'blacklist /tmp/.X11-unix' if 'net none' is set |