aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2019-03-12 07:20:24 +0000
committerLibravatar GitHub <noreply@github.com>2019-03-12 07:20:24 +0000
commit9fbb31e1f4f26d660ba4ef23bb5862c1ca4182a0 (patch)
treeee5a51ebd06636e5293b86b19967b42c5c3c9ed2 /etc
parentFixes for gnome-system-log (#2565) (diff)
downloadfirejail-9fbb31e1f4f26d660ba4ef23bb5862c1ca4182a0.tar.gz
firejail-9fbb31e1f4f26d660ba4ef23bb5862c1ca4182a0.tar.zst
firejail-9fbb31e1f4f26d660ba4ef23bb5862c1ca4182a0.zip
Harden gucharmap (#2566)
Diffstat (limited to 'etc')
-rw-r--r--etc/gucharmap.profile6
1 files changed, 5 insertions, 1 deletions
diff --git a/etc/gucharmap.profile b/etc/gucharmap.profile
index b1bd59307..5769bd1eb 100644
--- a/etc/gucharmap.profile
+++ b/etc/gucharmap.profile
@@ -20,7 +20,7 @@ include whitelist-var-common.inc
20apparmor 20apparmor
21caps.drop all 21caps.drop all
22machine-id 22machine-id
23net none 23#net none - breaks dbus
24no3d 24no3d
25nodvd 25nodvd
26nogroups 26nogroups
@@ -35,8 +35,12 @@ seccomp
35shell none 35shell none
36 36
37disable-mnt 37disable-mnt
38private-bin gucharmap
38private-cache 39private-cache
39private-dev 40private-dev
41private-etc alternatives,fonts
42private-home .config,.icons,.themes
43private-lib
40private-tmp 44private-tmp
41 45
42memory-deny-write-execute 46memory-deny-write-execute