1 files changed, 3 insertions, 0 deletions
diff --git a/etc/hexchat.profile b/etc/hexchat.profile
index fc817d9f9..47d39e8c4 100644
--- a/etc/hexchat.profile
+++ b/etc/hexchat.profile
@@ -16,8 +16,10 @@ include /etc/firejail/disable-programs.inc
 mkdir ~/.config/hexchat
 whitelist ~/.config/hexchat
 include /etc/firejail/whitelist-common.inc
+include /etc/firejail/whitelist-var-common.inc
 caps.drop all
+machine-id
 netfilter
 no3d
 nodvd
@@ -38,5 +40,6 @@ private-bin hexchat
 private-dev
 private-tmp
+memory-deny-write-execute
 noexec ${HOME}
 noexec /tmp

diff --git a/etc/hexchat.profile b/etc/hexchat.profile index fc817d9f9..47d39e8c4 100644 --- a/etc/hexchat.profile +++ b/etc/hexchat.profile
@@ -16,8 +16,10 @@ include /etc/firejail/disable-programs.inc
16	mkdir ~/.config/hexchat	16	mkdir ~/.config/hexchat
17	whitelist ~/.config/hexchat	17	whitelist ~/.config/hexchat
18	include /etc/firejail/whitelist-common.inc	18	include /etc/firejail/whitelist-common.inc
		19	include /etc/firejail/whitelist-var-common.inc
19		20
20	caps.drop all	21	caps.drop all
		22	machine-id
21	netfilter	23	netfilter
22	no3d	24	no3d
23	nodvd	25	nodvd
@@ -38,5 +40,6 @@ private-bin hexchat
38	private-dev	40	private-dev
39	private-tmp	41	private-tmp
40		42
		43	memory-deny-write-execute
41	noexec ${HOME}	44	noexec ${HOME}
42	noexec /tmp	45	noexec /tmp