diff options
author | smitsohu <smitsohu@gmail.com> | 2019-03-12 23:45:13 +0100 |
---|---|---|
committer | smitsohu <smitsohu@gmail.com> | 2019-03-12 23:45:13 +0100 |
commit | 1862d24fd9990bfc61f9ae9710f089b3d8038427 (patch) | |
tree | 5ac042c886e49d7cd975af2b6cdb8b4827270fd1 /etc/torbrowser-launcher.profile | |
parent | add disable-exec.inc to all profiles with apparmor (#2576) (diff) | |
download | firejail-1862d24fd9990bfc61f9ae9710f089b3d8038427.tar.gz firejail-1862d24fd9990bfc61f9ae9710f089b3d8038427.tar.zst firejail-1862d24fd9990bfc61f9ae9710f089b3d8038427.zip |
add disable-exec.inc to few more profiles
Diffstat (limited to 'etc/torbrowser-launcher.profile')
-rw-r--r-- | etc/torbrowser-launcher.profile | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/etc/torbrowser-launcher.profile b/etc/torbrowser-launcher.profile index 2b1cc6549..e45b335c8 100644 --- a/etc/torbrowser-launcher.profile +++ b/etc/torbrowser-launcher.profile | |||
@@ -6,6 +6,8 @@ include torbrowser-launcher.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | ignore noexec ${HOME} | ||
10 | |||
9 | noblacklist ${HOME}/.config/torbrowser | 11 | noblacklist ${HOME}/.config/torbrowser |
10 | noblacklist ${HOME}/.local/share/torbrowser | 12 | noblacklist ${HOME}/.local/share/torbrowser |
11 | 13 | ||
@@ -17,6 +19,7 @@ noblacklist /usr/lib/python3* | |||
17 | 19 | ||
18 | include disable-common.inc | 20 | include disable-common.inc |
19 | include disable-devel.inc | 21 | include disable-devel.inc |
22 | include disable-exec.inc | ||
20 | include disable-interpreters.inc | 23 | include disable-interpreters.inc |
21 | include disable-passwdmgr.inc | 24 | include disable-passwdmgr.inc |
22 | include disable-programs.inc | 25 | include disable-programs.inc |
@@ -51,5 +54,3 @@ private-bin bash,cp,dirname,env,expr,file,getconf,gpg,grep,id,ln,mkdir,python*,r | |||
51 | private-dev | 54 | private-dev |
52 | private-etc alternatives,fonts,hostname,hosts,resolv.conf,pki,ssl,ca-certificates,crypto-policies,alsa,asound.conf,pulse,machine-id,ld.so.cache | 55 | private-etc alternatives,fonts,hostname,hosts,resolv.conf,pki,ssl,ca-certificates,crypto-policies,alsa,asound.conf,pulse,machine-id,ld.so.cache |
53 | private-tmp | 56 | private-tmp |
54 | |||
55 | noexec /tmp | ||