diff options
| author |  smitsohu <smitsohu@gmail.com> | 2022-07-19 15:19:24 +0200 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2022-07-23 16:21:14 +0200 |
| commit | 87afef810c2dfbf67420dc76a67c707fbb7353db (patch) | |
| tree | d44aed25d9c050967eb6abe31b4081c0956f4a74 /etc | |
| parent | protocol filter: add x32 ABI handling (diff) | |
| download | firejail-87afef810c2dfbf67420dc76a67c707fbb7353db.tar.gz firejail-87afef810c2dfbf67420dc76a67c707fbb7353db.tar.zst firejail-87afef810c2dfbf67420dc76a67c707fbb7353db.zip | |
introduce new option restrict-namespaces
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/profile-a-l/default.profile | 1 | ||||
| -rw-r--r-- | etc/profile-m-z/server.profile | 1 | ||||
| -rw-r--r-- | etc/templates/profile.template | 1 |
3 files changed, 3 insertions, 0 deletions
diff --git a/etc/profile-a-l/default.profile b/etc/profile-a-l/default.profile index dac842bb6..397a89bee 100644 --- a/etc/profile-a-l/default.profile +++ b/etc/profile-a-l/default.profile | |||
| @@ -60,3 +60,4 @@ seccomp | |||
| 60 | # deterministic-shutdown | 60 | # deterministic-shutdown |
| 61 | # memory-deny-write-execute | 61 | # memory-deny-write-execute |
| 62 | # read-only ${HOME} | 62 | # read-only ${HOME} |
| 63 | # restrict-namespaces | ||
diff --git a/etc/profile-m-z/server.profile b/etc/profile-m-z/server.profile index fd7ffb38d..8d8a1dac6 100644 --- a/etc/profile-m-z/server.profile +++ b/etc/profile-m-z/server.profile | |||
| @@ -90,6 +90,7 @@ dbus-user none | |||
| 90 | # deterministic-shutdown | 90 | # deterministic-shutdown |
| 91 | # memory-deny-write-execute | 91 | # memory-deny-write-execute |
| 92 | # read-only ${HOME} | 92 | # read-only ${HOME} |
| 93 | # restrict-namespaces | ||
| 93 | # writable-run-user | 94 | # writable-run-user |
| 94 | # writable-var | 95 | # writable-var |
| 95 | # writable-var-log | 96 | # writable-var-log |
diff --git a/etc/templates/profile.template b/etc/templates/profile.template index 28339765f..59083f660 100644 --- a/etc/templates/profile.template +++ b/etc/templates/profile.template | |||
| @@ -228,3 +228,4 @@ include globals.local | |||
| 228 | ##noexec PATH | 228 | ##noexec PATH |
| 229 | ##read-only ${HOME} | 229 | ##read-only ${HOME} |
| 230 | ##read-write ${HOME} | 230 | ##read-write ${HOME} |
| 231 | #restrict-namespaces | ||