aboutsummaryrefslogtreecommitdiffstats
path: root/etc/atool.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/atool.profile')
-rw-r--r--etc/atool.profile12
1 files changed, 10 insertions, 2 deletions
diff --git a/etc/atool.profile b/etc/atool.profile
index c82108cef..b17498e9d 100644
--- a/etc/atool.profile
+++ b/etc/atool.profile
@@ -18,15 +18,21 @@ noblacklist /usr/share/perl*
18 18
19include disable-common.inc 19include disable-common.inc
20# include disable-devel.inc 20# include disable-devel.inc
21include disable-exec.inc
21include disable-interpreters.inc 22include disable-interpreters.inc
22include disable-passwdmgr.inc 23include disable-passwdmgr.inc
23include disable-programs.inc 24include disable-programs.inc
24 25
26apparmor
25caps.drop all 27caps.drop all
26netfilter 28hostname atool
29ipc-namespace
30machine-id
27net none 31net none
32netfilter
28no3d 33no3d
29nodvd 34nodvd
35nodbus
30nogroups 36nogroups
31nonewprivs 37nonewprivs
32noroot 38noroot
@@ -39,9 +45,11 @@ seccomp
39shell none 45shell none
40tracelog 46tracelog
41 47
48# private-bin atool,perl
42private-cache 49private-cache
43# private-bin atool
44private-dev 50private-dev
45# without login.defs atool complains and uses UID/GID 1000 by default 51# without login.defs atool complains and uses UID/GID 1000 by default
46private-etc alternatives,passwd,group,login.defs 52private-etc alternatives,passwd,group,login.defs
47private-tmp 53private-tmp
54
55memory-deny-write-execute