diff options
author | 2018-12-13 03:25:20 +0100 | |
---|---|---|
committer | 2018-12-13 03:25:20 +0100 | |
commit | 24e6d64445436963340c6104353b1c078a48415d (patch) | |
tree | 456d823d1a2ce998112bce359e3b4adbce737b99 /etc | |
parent | Revert "pulseaudio: use env variable fallback in more cases" (diff) | |
parent | enable apparmor in libreoffice profile (diff) | |
download | firejail-24e6d64445436963340c6104353b1c078a48415d.tar.gz firejail-24e6d64445436963340c6104353b1c078a48415d.tar.zst firejail-24e6d64445436963340c6104353b1c078a48415d.zip |
Merge pull request #2293 from smitsohu/smitsohu-patch-libreoffice
enable apparmor in libreoffice profile
Diffstat (limited to 'etc')
-rw-r--r-- | etc/libreoffice.profile | 18 |
1 files changed, 11 insertions, 7 deletions
diff --git a/etc/libreoffice.profile b/etc/libreoffice.profile index 1a3f6cbd1..102760513 100644 --- a/etc/libreoffice.profile +++ b/etc/libreoffice.profile | |||
@@ -24,23 +24,27 @@ include disable-programs.inc | |||
24 | 24 | ||
25 | include whitelist-var-common.inc | 25 | include whitelist-var-common.inc |
26 | 26 | ||
27 | # Ubuntu 18.04 uses its own apparmor profile | 27 | # ubuntu 18.04 comes with its own apparmor profile, but it is not in enforce mode. |
28 | # uncomment the next line if you are not on Ubuntu | 28 | # comment the next line to use the ubuntu profile instead of firejail's apparmor profile |
29 | #apparmor | 29 | apparmor |
30 | caps.drop all | 30 | caps.drop all |
31 | machine-id | 31 | machine-id |
32 | netfilter | 32 | netfilter |
33 | #nodbus | 33 | #nodbus |
34 | nodvd | 34 | nodvd |
35 | nogroups | 35 | nogroups |
36 | #nonewprivs - fix for Ubuntu 18.04/Debian 10 | 36 | # comment nonewprivs when using the ubuntu 18.04/debian 10 apparmor profile |
37 | nonewprivs | ||
37 | noroot | 38 | noroot |
38 | notv | 39 | notv |
39 | nou2f | 40 | nou2f |
40 | #protocol unix,inet,inet6 - fix for Ubuntu 18.04/Debian 10 | 41 | # comment the protocol line when using the ubuntu 18.04/debian 10 apparmor profile |
41 | #seccomp - fix for Ubuntu 18.04/Debian 10 | 42 | protocol unix,inet,inet6 |
43 | # comment seccomp when using the ubuntu 18.04/debian 10 apparmor profile | ||
44 | seccomp | ||
42 | shell none | 45 | shell none |
43 | #tracelog - problems reported by Ubuntu 18.04 apparmor profile in /var/log/syslog | 46 | # comment tracelog when using the ubuntu 18.04/debian 10 apparmor profile |
47 | tracelog | ||
44 | 48 | ||
45 | private-dev | 49 | private-dev |
46 | private-tmp | 50 | private-tmp |