Tightened keepassx profiles.

2 files changed, 10 insertions, 5 deletions

diff --git a/etc/keepassx.profile b/etc/keepassx.profile
index ec6d014bf..6c36697e5 100644
--- a/etc/keepassx.profile
+++ b/etc/keepassx.profile
@@ -1,6 +1,6 @@
 # This file is overwritten during software install.
 # Persistent customizations should go in a .local file.
-include /etc/firejail/keepassx.local
+include /etc/firejail/keepassx2.local
 
 # keepassx password manager profile
 noblacklist ${HOME}/.config/keepassx
@@ -13,14 +13,17 @@ include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
 
 caps.drop all
+net none
 nogroups
 nonewprivs
 noroot
 nosound
 protocol unix
 seccomp
-netfilter
 shell none
+tracelog
 
+private-bin keepassx
+private-etc fonts
+private-dev
 private-tmp
-private-dev 
diff --git a/etc/keepassx2.profile b/etc/keepassx2.profile
index 5bf79b891..83f93e9f7 100644
--- a/etc/keepassx2.profile
+++ b/etc/keepassx2.profile
@@ -13,14 +13,16 @@ include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
 
 caps.drop all
+net none
 nogroups
 nonewprivs
 noroot
 nosound
 protocol unix
 seccomp
-netfilter
 shell none
 
+private-bin keepassx2
+private-etc fonts
+private-dev
 private-tmp
-private-dev