diff options
author | 2017-09-05 08:13:25 -0400 | |
---|---|---|
committer | 2017-09-05 08:13:25 -0400 | |
commit | 16497087c03e68c46b54247fda6e4e03f8e52d34 (patch) | |
tree | 7269e726126d1614cc60cc103cfc33466f596496 /etc/unbound.profile | |
parent | Merge pull request #1530 from smitsohu/snap (diff) | |
parent | wireshark needs cap_dac_override (diff) | |
download | firejail-16497087c03e68c46b54247fda6e4e03f8e52d34.tar.gz firejail-16497087c03e68c46b54247fda6e4e03f8e52d34.tar.zst firejail-16497087c03e68c46b54247fda6e4e03f8e52d34.zip |
Merge pull request #1526 from smitsohu/caps
tighten some capability sets further
Diffstat (limited to 'etc/unbound.profile')
-rw-r--r-- | etc/unbound.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/unbound.profile b/etc/unbound.profile index afc903e88..2a38aa7c6 100644 --- a/etc/unbound.profile +++ b/etc/unbound.profile | |||
@@ -17,7 +17,7 @@ include /etc/firejail/disable-passwdmgr.inc | |||
17 | include /etc/firejail/disable-programs.inc | 17 | include /etc/firejail/disable-programs.inc |
18 | 18 | ||
19 | caps | 19 | caps |
20 | # caps.keep ipc_lock,net_bind_service,setgid,setuid,sys_chroot,sys_resource | 20 | # caps.keep net_bind_service,setgid,setuid,sys_chroot,sys_resource |
21 | no3d | 21 | no3d |
22 | nodvd | 22 | nodvd |
23 | nonewprivs | 23 | nonewprivs |