diff options
| author |  netblue30 <netblue30@protonmail.com> | 2023-12-21 09:50:22 -0500 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2023-12-21 09:50:22 -0500 |
| commit | c245fec2d475b86c03fd8c8a6b9013ed5bdab91b (patch) | |
| tree | 5f76b7f8ec59519d15c40f5260fb7e8711f847f4 /etc/templates | |
| parent | Merge pull request #6118 from NetSysFire/patch-4 (diff) | |
| parent | landlock: move commands into profile and add landlock.enforce (diff) | |
| download | firejail-c245fec2d475b86c03fd8c8a6b9013ed5bdab91b.tar.gz firejail-c245fec2d475b86c03fd8c8a6b9013ed5bdab91b.tar.zst firejail-c245fec2d475b86c03fd8c8a6b9013ed5bdab91b.zip | |
Merge pull request #6125 from kmk3/landlock-enforce
landlock: move commands into profile and add landlock.enforce
Diffstat (limited to 'etc/templates')
| -rw-r--r-- | etc/templates/profile.template | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/etc/templates/profile.template b/etc/templates/profile.template index 6299d42cd..8882c9012 100644 --- a/etc/templates/profile.template +++ b/etc/templates/profile.template | |||
| @@ -137,6 +137,13 @@ include globals.local | |||
| 137 | #include whitelist-usr-share-common.inc | 137 | #include whitelist-usr-share-common.inc |
| 138 | #include whitelist-var-common.inc | 138 | #include whitelist-var-common.inc |
| 139 | 139 | ||
| 140 | # Landlock commands | ||
| 141 | ##landlock.read PATH | ||
| 142 | ##landlock.write PATH | ||
| 143 | ##landlock.special PATH | ||
| 144 | ##landlock.execute PATH | ||
| 145 | #include landlock-common.inc | ||
| 146 | |||
| 140 | ##allusers | 147 | ##allusers |
| 141 | #apparmor | 148 | #apparmor |
| 142 | #caps.drop all | 149 | #caps.drop all |