diff options
author | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2020-04-03 14:38:39 +0200 |
---|---|---|
committer | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2020-04-03 17:52:22 +0200 |
commit | 9264ebbd12fa63a77f062d2801195e815237ac94 (patch) | |
tree | 5e5ac1164e063fcf5979a4163c7d87ebefad269f /etc | |
parent | allow using wruc on any program (diff) | |
download | firejail-9264ebbd12fa63a77f062d2801195e815237ac94.tar.gz firejail-9264ebbd12fa63a77f062d2801195e815237ac94.tar.zst firejail-9264ebbd12fa63a77f062d2801195e815237ac94.zip |
misc fixes & hardening
Diffstat (limited to 'etc')
-rw-r--r-- | etc/0ad.profile | 1 | ||||
-rw-r--r-- | etc/ghostwriter.profile | 10 | ||||
-rw-r--r-- | etc/newsbeuter.profile | 2 |
3 files changed, 7 insertions, 6 deletions
diff --git a/etc/0ad.profile b/etc/0ad.profile index 8b5820d5e..d01de00d3 100644 --- a/etc/0ad.profile +++ b/etc/0ad.profile | |||
@@ -45,6 +45,7 @@ tracelog | |||
45 | 45 | ||
46 | disable-mnt | 46 | disable-mnt |
47 | private-bin 0ad,pyrogenesis,sh,which | 47 | private-bin 0ad,pyrogenesis,sh,which |
48 | private-cache | ||
48 | private-dev | 49 | private-dev |
49 | private-tmp | 50 | private-tmp |
50 | 51 | ||
diff --git a/etc/ghostwriter.profile b/etc/ghostwriter.profile index 27becf8fe..c18a6b72e 100644 --- a/etc/ghostwriter.profile +++ b/etc/ghostwriter.profile | |||
@@ -19,11 +19,11 @@ include disable-passwdmgr.inc | |||
19 | include disable-programs.inc | 19 | include disable-programs.inc |
20 | include disable-xdg.inc | 20 | include disable-xdg.inc |
21 | 21 | ||
22 | #whitelist /usr/share/ghostwriter | 22 | whitelist /usr/share/ghostwriter |
23 | #whitelist /usr/share/mozilla-dicts | 23 | whitelist /usr/share/mozilla-dicts |
24 | #whitelist /usr/share/texlive | 24 | whitelist /usr/share/texlive |
25 | #whitelist /usr/share/pandoc* | 25 | whitelist /usr/share/pandoc* |
26 | #include whitelist-usr-share-common.inc | 26 | include whitelist-usr-share-common.inc |
27 | 27 | ||
28 | apparmor | 28 | apparmor |
29 | caps.drop all | 29 | caps.drop all |
diff --git a/etc/newsbeuter.profile b/etc/newsbeuter.profile index 059c2156d..85581a2f0 100644 --- a/etc/newsbeuter.profile +++ b/etc/newsbeuter.profile | |||
@@ -1,4 +1,4 @@ | |||
1 | # Firejail profile for Newsboat | 1 | # Firejail profile for Newsbeuter |
2 | # Description: Text based Atom/RSS feed reader | 2 | # Description: Text based Atom/RSS feed reader |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | # Persistent local customizations | 4 | # Persistent local customizations |