diff options
author | smitsohu <smitsohu@gmail.com> | 2017-09-25 15:57:50 +0200 |
---|---|---|
committer | smitsohu <smitsohu@gmail.com> | 2017-09-25 15:57:50 +0200 |
commit | 9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2 (patch) | |
tree | 632cecd6b845ecc93c5024170671a9894c2cda49 /etc/unbound.profile | |
parent | fix nginx and apache2, possible fix for #1534 (diff) | |
download | firejail-9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2.tar.gz firejail-9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2.tar.zst firejail-9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2.zip |
various profile enhancements
* okular needs kdeinit4 for open file dialog since recently
* memory-deny-write-execute should be a safe addition for
desktop use of dnscrypt and unbound
* cleanup works
Diffstat (limited to 'etc/unbound.profile')
-rw-r--r-- | etc/unbound.profile | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/unbound.profile b/etc/unbound.profile index 2a38aa7c6..d380b5698 100644 --- a/etc/unbound.profile +++ b/etc/unbound.profile | |||
@@ -9,7 +9,6 @@ blacklist /tmp/.X11-unix | |||
9 | 9 | ||
10 | noblacklist /sbin | 10 | noblacklist /sbin |
11 | noblacklist /usr/sbin | 11 | noblacklist /usr/sbin |
12 | noblacklist /var/log | ||
13 | 12 | ||
14 | include /etc/firejail/disable-common.inc | 13 | include /etc/firejail/disable-common.inc |
15 | include /etc/firejail/disable-devel.inc | 14 | include /etc/firejail/disable-devel.inc |
@@ -31,4 +30,4 @@ private | |||
31 | private-dev | 30 | private-dev |
32 | 31 | ||
33 | # mdwe can break modules/plugins | 32 | # mdwe can break modules/plugins |
34 | # memory-deny-write-execute | 33 | memory-deny-write-execute |