diff options
author | 2019-10-13 18:17:59 +0200 | |
---|---|---|
committer | 2019-10-13 18:17:59 +0200 | |
commit | 973247449c462fe62d066a31ad4ac7cee1330786 (patch) | |
tree | ecfb53c5f1df1e95a59fb6c8a9dcfbeddc024a9b /etc | |
parent | add tracelog to some profiles (diff) | |
download | firejail-973247449c462fe62d066a31ad4ac7cee1330786.tar.gz firejail-973247449c462fe62d066a31ad4ac7cee1330786.tar.zst firejail-973247449c462fe62d066a31ad4ac7cee1330786.zip |
harden pandoc & shellcheck
Diffstat (limited to 'etc')
-rw-r--r-- | etc/pandoc.profile | 1 | ||||
-rw-r--r-- | etc/shellcheck.profile | 3 |
2 files changed, 4 insertions, 0 deletions
diff --git a/etc/pandoc.profile b/etc/pandoc.profile index 788324855..8c9c1e818 100644 --- a/etc/pandoc.profile +++ b/etc/pandoc.profile | |||
@@ -45,6 +45,7 @@ disable-mnt | |||
45 | private-bin context,latex,mktexfmt,pandoc,pdflatex,pdfroff,prince,weasyprint,wkhtmltopdf | 45 | private-bin context,latex,mktexfmt,pandoc,pdflatex,pdfroff,prince,weasyprint,wkhtmltopdf |
46 | private-cache | 46 | private-cache |
47 | private-dev | 47 | private-dev |
48 | rivate-etc alternatives,texlive | ||
48 | private-tmp | 49 | private-tmp |
49 | 50 | ||
50 | memory-deny-write-execute | 51 | memory-deny-write-execute |
diff --git a/etc/shellcheck.profile b/etc/shellcheck.profile index da5b4258b..2fcd69d3b 100644 --- a/etc/shellcheck.profile +++ b/etc/shellcheck.profile | |||
@@ -21,6 +21,7 @@ include whitelist-var-common.inc | |||
21 | 21 | ||
22 | caps.drop all | 22 | caps.drop all |
23 | ipc-namespace | 23 | ipc-namespace |
24 | machine-id | ||
24 | net none | 25 | net none |
25 | no3d | 26 | no3d |
26 | nodbus | 27 | nodbus |
@@ -35,8 +36,10 @@ novideo | |||
35 | protocol unix | 36 | protocol unix |
36 | seccomp | 37 | seccomp |
37 | shell none | 38 | shell none |
39 | tracelog | ||
38 | x11 none | 40 | x11 none |
39 | 41 | ||
42 | private-cache | ||
40 | private-dev | 43 | private-dev |
41 | private-tmp | 44 | private-tmp |
42 | 45 | ||