diff options
-rw-r--r-- | etc/firejail-default | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/etc/firejail-default b/etc/firejail-default index 965167891..8bf42b3a3 100644 --- a/etc/firejail-default +++ b/etc/firejail-default | |||
@@ -13,12 +13,12 @@ | |||
13 | profile firejail-default flags=(attach_disconnected,mediate_deleted) { | 13 | profile firejail-default flags=(attach_disconnected,mediate_deleted) { |
14 | 14 | ||
15 | ########## | 15 | ########## |
16 | # D-Bus is a huge security hole. Uncomment those lines if you need D-Bus | 16 | # Allow D-Bus access. It may negatively affect security. Comment those lines or |
17 | # functionality. | 17 | # use 'nodbus' option in profile if you don't need D-Bus functionality. |
18 | ########## | 18 | ########## |
19 | ##include <abstractions/dbus-strict> | 19 | #include <abstractions/dbus-strict> |
20 | ##include <abstractions/dbus-session-strict> | 20 | #include <abstractions/dbus-session-strict> |
21 | #dbus, | 21 | dbus, |
22 | 22 | ||
23 | ########## | 23 | ########## |
24 | # With ptrace it is possible to inspect and hijack running programs. Usually this | 24 | # With ptrace it is possible to inspect and hijack running programs. Usually this |