diff options
| author |  Tad <tad@spotco.us> | 2018-04-01 06:10:34 -0400 |
|---|---|---|
| committer | Tad <tad@spotco.us> | 2018-04-01 06:10:34 -0400 |
| commit | d340cb30e7181b722a7be9330bca70ca70ae6651 (patch) | |
| tree | dc4fd008d7e223e819fbcd2c974ca22b6ce7fc63 /etc | |
| parent | Create gnome-logs.profile (diff) | |
| download | firejail-d340cb30e7181b722a7be9330bca70ca70ae6651.tar.gz firejail-d340cb30e7181b722a7be9330bca70ca70ae6651.tar.zst firejail-d340cb30e7181b722a7be9330bca70ca70ae6651.zip | |
Fixup gnome-logs
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/gnome-logs.profile | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/etc/gnome-logs.profile b/etc/gnome-logs.profile index 3c75522c0..5f41b4aa9 100644 --- a/etc/gnome-logs.profile +++ b/etc/gnome-logs.profile | |||
| @@ -10,6 +10,7 @@ include /etc/firejail/disable-devel.inc | |||
| 10 | include /etc/firejail/disable-passwdmgr.inc | 10 | include /etc/firejail/disable-passwdmgr.inc |
| 11 | include /etc/firejail/disable-programs.inc | 11 | include /etc/firejail/disable-programs.inc |
| 12 | 12 | ||
| 13 | whitelist /var/log/journal | ||
| 13 | include /etc/firejail/whitelist-var-common.inc | 14 | include /etc/firejail/whitelist-var-common.inc |
| 14 | 15 | ||
| 15 | caps.drop all | 16 | caps.drop all |
| @@ -31,9 +32,10 @@ shell none | |||
| 31 | disable-mnt | 32 | disable-mnt |
| 32 | private-bin gnome-logs | 33 | private-bin gnome-logs |
| 33 | private-dev | 34 | private-dev |
| 34 | private-etc fonts | 35 | #private-etc fonts |
| 35 | private-lib gdk-pixbuf-2.0,gio,gvfs/libgvfscommon.so,libgconf-2.so.4,librsvg-2.so.2 | 36 | #private-lib gdk-pixbuf-2.0,gio,gvfs/libgvfscommon.so,libgconf-2.so.4,librsvg-2.so.2 |
| 36 | private-tmp | 37 | private-tmp |
| 38 | writable-var-log | ||
| 37 | 39 | ||
| 38 | noexec ${HOME} | 40 | noexec ${HOME} |
| 39 | noexec /tmp | 41 | noexec /tmp |