diff options
| author |  smitsohu <smitsohu@gmail.com> | 2017-09-25 15:57:50 +0200 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2017-09-25 15:57:50 +0200 |
| commit | 9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2 (patch) | |
| tree | 632cecd6b845ecc93c5024170671a9894c2cda49 /etc/unbound.profile | |
| parent | fix nginx and apache2, possible fix for #1534 (diff) | |
| download | firejail-9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2.tar.gz firejail-9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2.tar.zst firejail-9b99215a1eb2ac5ff8fddeff3e43b725fee18ca2.zip | |
various profile enhancements
* okular needs kdeinit4 for open file dialog since recently
* memory-deny-write-execute should be a safe addition for
desktop use of dnscrypt and unbound
* cleanup works
Diffstat (limited to 'etc/unbound.profile')
| -rw-r--r-- | etc/unbound.profile | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/unbound.profile b/etc/unbound.profile index 2a38aa7c6..d380b5698 100644 --- a/etc/unbound.profile +++ b/etc/unbound.profile | |||
| @@ -9,7 +9,6 @@ blacklist /tmp/.X11-unix | |||
| 9 | 9 | ||
| 10 | noblacklist /sbin | 10 | noblacklist /sbin |
| 11 | noblacklist /usr/sbin | 11 | noblacklist /usr/sbin |
| 12 | noblacklist /var/log | ||
| 13 | 12 | ||
| 14 | include /etc/firejail/disable-common.inc | 13 | include /etc/firejail/disable-common.inc |
| 15 | include /etc/firejail/disable-devel.inc | 14 | include /etc/firejail/disable-devel.inc |
| @@ -31,4 +30,4 @@ private | |||
| 31 | private-dev | 30 | private-dev |
| 32 | 31 | ||
| 33 | # mdwe can break modules/plugins | 32 | # mdwe can break modules/plugins |
| 34 | # memory-deny-write-execute | 33 | memory-deny-write-execute |