diff options
author | 2017-08-23 07:46:52 -0400 | |
---|---|---|
committer | 2017-08-23 07:46:52 -0400 | |
commit | 976e7ea76e8ffcfd73eb9a3f7c791b5ed0bcdf66 (patch) | |
tree | ffc1657e4af251064848d1b0abd05370df67f1b4 /etc/xviewer.profile | |
parent | Merge pull request #1488 from SpotComms/mf (diff) | |
parent | harmonize vlc and cvlc (diff) | |
download | firejail-976e7ea76e8ffcfd73eb9a3f7c791b5ed0bcdf66.tar.gz firejail-976e7ea76e8ffcfd73eb9a3f7c791b5ed0bcdf66.tar.zst firejail-976e7ea76e8ffcfd73eb9a3f7c791b5ed0bcdf66.zip |
Merge pull request #1489 from smitsohu/profilefixes
profile fixes and enhancements
Diffstat (limited to 'etc/xviewer.profile')
-rw-r--r-- | etc/xviewer.profile | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/etc/xviewer.profile b/etc/xviewer.profile index 70ad3b895..b9ff3948a 100644 --- a/etc/xviewer.profile +++ b/etc/xviewer.profile | |||
@@ -16,12 +16,15 @@ include /etc/firejail/disable-passwdmgr.inc | |||
16 | include /etc/firejail/disable-programs.inc | 16 | include /etc/firejail/disable-programs.inc |
17 | 17 | ||
18 | caps.drop all | 18 | caps.drop all |
19 | # net none - makes settings immutable | ||
20 | no3d | ||
19 | nodvd | 21 | nodvd |
20 | nogroups | 22 | nogroups |
21 | nonewprivs | 23 | nonewprivs |
22 | noroot | 24 | noroot |
23 | nosound | 25 | nosound |
24 | notv | 26 | notv |
27 | novideo | ||
25 | protocol unix | 28 | protocol unix |
26 | seccomp | 29 | seccomp |
27 | shell none | 30 | shell none |
@@ -29,7 +32,9 @@ tracelog | |||
29 | 32 | ||
30 | private-bin xviewer | 33 | private-bin xviewer |
31 | private-dev | 34 | private-dev |
35 | private-etc fonts | ||
32 | private-tmp | 36 | private-tmp |
33 | 37 | ||
38 | memory-deny-write-execute | ||
34 | noexec ${HOME} | 39 | noexec ${HOME} |
35 | noexec /tmp | 40 | noexec /tmp |