diff options
| author |  smitsohu <smitsohu@gmail.com> | 2017-09-03 21:34:07 +0200 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2017-09-03 21:34:07 +0200 |
| commit | 8a0725cd013564500af985c728c1589ae9eb47f7 (patch) | |
| tree | ac078334ce7fbde29e68a69ac7790a20df74e095 /etc/unbound.profile | |
| parent | Merge pull request #1523 from pizzadude/patch-4 (diff) | |
| download | firejail-8a0725cd013564500af985c728c1589ae9eb47f7.tar.gz firejail-8a0725cd013564500af985c728c1589ae9eb47f7.tar.zst firejail-8a0725cd013564500af985c728c1589ae9eb47f7.zip | |
tighten capability sets
Diffstat (limited to 'etc/unbound.profile')
| -rw-r--r-- | etc/unbound.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/unbound.profile b/etc/unbound.profile index afc903e88..2a38aa7c6 100644 --- a/etc/unbound.profile +++ b/etc/unbound.profile | |||
| @@ -17,7 +17,7 @@ include /etc/firejail/disable-passwdmgr.inc | |||
| 17 | include /etc/firejail/disable-programs.inc | 17 | include /etc/firejail/disable-programs.inc |
| 18 | 18 | ||
| 19 | caps | 19 | caps |
| 20 | # caps.keep ipc_lock,net_bind_service,setgid,setuid,sys_chroot,sys_resource | 20 | # caps.keep net_bind_service,setgid,setuid,sys_chroot,sys_resource |
| 21 | no3d | 21 | no3d |
| 22 | nodvd | 22 | nodvd |
| 23 | nonewprivs | 23 | nonewprivs |