diff options
author | smitsohu <smitsohu@gmail.com> | 2017-08-22 01:54:31 +0200 |
---|---|---|
committer | smitsohu <smitsohu@gmail.com> | 2017-08-22 01:54:31 +0200 |
commit | f12c7af205ddd6c0d75587702f01688dc62a86c5 (patch) | |
tree | 853df0cb54dee640560b1832c14644df0ec18293 /etc/xreader.profile | |
parent | testing (diff) | |
download | firejail-f12c7af205ddd6c0d75587702f01688dc62a86c5.tar.gz firejail-f12c7af205ddd6c0d75587702f01688dc62a86c5.tar.zst firejail-f12c7af205ddd6c0d75587702f01688dc62a86c5.zip |
various profile fixes
Diffstat (limited to 'etc/xreader.profile')
-rw-r--r-- | etc/xreader.profile | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/etc/xreader.profile b/etc/xreader.profile index 107cefe5e..615256102 100644 --- a/etc/xreader.profile +++ b/etc/xreader.profile | |||
@@ -15,17 +15,25 @@ include /etc/firejail/disable-passwdmgr.inc | |||
15 | include /etc/firejail/disable-programs.inc | 15 | include /etc/firejail/disable-programs.inc |
16 | 16 | ||
17 | caps.drop all | 17 | caps.drop all |
18 | no3d | ||
18 | nodvd | 19 | nodvd |
19 | nogroups | 20 | nogroups |
20 | nonewprivs | 21 | nonewprivs |
21 | noroot | 22 | noroot |
22 | nosound | 23 | nosound |
23 | notv | 24 | notv |
25 | novideo | ||
24 | protocol unix | 26 | protocol unix |
25 | seccomp | 27 | seccomp |
26 | shell none | 28 | shell none |
27 | tracelog | 29 | tracelog |
28 | 30 | ||
29 | private-bin xreader, xreader-previewer, xreader-thumbnailer | 31 | private-bin xreader,xreader-previewer,xreader-thumbnailer |
30 | private-dev | 32 | private-dev |
31 | private-tmp | 33 | private-etc fonts |
34 | # xreader needs access to /tmp/mozilla* to work in firefox | ||
35 | # private-tmp | ||
36 | |||
37 | memory-deny-write-execute | ||
38 | noexec ${HOME} | ||
39 | noexec /tmp | ||