diff options
| author |  netblue30 <netblue30@yahoo.com> | 2015-09-24 08:03:57 -0400 |
|---|---|---|
| committer | netblue30 <netblue30@yahoo.com> | 2015-09-24 08:03:57 -0400 |
| commit | 4f36b7246a74ecd3c2599292677ed82d96130801 (patch) | |
| tree | d3358e03f344739e60ae2b0cb67766e727d2a960 /etc/totem.profile | |
| parent | profile work (diff) | |
| download | firejail-4f36b7246a74ecd3c2599292677ed82d96130801.tar.gz firejail-4f36b7246a74ecd3c2599292677ed82d96130801.tar.zst firejail-4f36b7246a74ecd3c2599292677ed82d96130801.zip | |
security profile work
Diffstat (limited to 'etc/totem.profile')
| -rw-r--r-- | etc/totem.profile | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/totem.profile b/etc/totem.profile index 6b26a4e0e..a6e26dbdb 100644 --- a/etc/totem.profile +++ b/etc/totem.profile | |||
| @@ -3,6 +3,10 @@ include /etc/firejail/disable-mgmt.inc | |||
| 3 | include /etc/firejail/disable-secret.inc | 3 | include /etc/firejail/disable-secret.inc |
| 4 | include /etc/firejail/disable-common.inc | 4 | include /etc/firejail/disable-common.inc |
| 5 | include /etc/firejail/disable-history.inc | 5 | include /etc/firejail/disable-history.inc |
| 6 | blacklist ${HOME}/.pki/nssdb | ||
| 7 | blacklist {HOME}/.lastpass | ||
| 8 | blacklist {HOME}/.keepassx | ||
| 9 | blacklist {HOME}/.password-store | ||
| 6 | caps.drop all | 10 | caps.drop all |
| 7 | seccomp | 11 | seccomp |
| 8 | noroot | 12 | noroot |