diff options
Diffstat (limited to 'etc/mupdf.profile')
-rw-r--r-- | etc/mupdf.profile | 7 |
1 files changed, 2 insertions, 5 deletions
diff --git a/etc/mupdf.profile b/etc/mupdf.profile index a55a01206..4b98552c4 100644 --- a/etc/mupdf.profile +++ b/etc/mupdf.profile | |||
@@ -19,6 +19,7 @@ noroot | |||
19 | nosound | 19 | nosound |
20 | protocol unix | 20 | protocol unix |
21 | seccomp | 21 | seccomp |
22 | # seccomp.keep access,arch_prctl,brk,clone,close,connect,execve,exit_group,fchmod,fchown,fcntl,fstat,futex,getcwd,getpeername,getrlimit,getsockname,getsockopt,lseek,lstat,mlock,mmap,mprotect,mremap,munmap,nanosleep,open,poll,prctl,read,recvfrom,recvmsg,restart_syscall,rt_sigaction,rt_sigprocmask,select,sendmsg,set_robust_list,set_tid_address,setresgid,setresuid,shmat,shmctl,shmget,shutdown,socket,stat,sysinfo,uname,unshare,wait4,write,writev | ||
22 | shell none | 23 | shell none |
23 | tracelog | 24 | tracelog |
24 | 25 | ||
@@ -26,9 +27,5 @@ tracelog | |||
26 | private-dev | 27 | private-dev |
27 | private-etc fonts | 28 | private-etc fonts |
28 | private-tmp | 29 | private-tmp |
29 | read-only ${HOME} | ||
30 | |||
31 | # CLOBBERED COMMENTS | ||
32 | # Experimental: | ||
33 | # mupdf will never write anything | 30 | # mupdf will never write anything |
34 | # seccomp.keep access,arch_prctl,brk,clone,close,connect,execve,exit_group,fchmod,fchown,fcntl,fstat,futex,getcwd,getpeername,getrlimit,getsockname,getsockopt,lseek,lstat,mlock,mmap,mprotect,mremap,munmap,nanosleep,open,poll,prctl,read,recvfrom,recvmsg,restart_syscall,rt_sigaction,rt_sigprocmask,select,sendmsg,set_robust_list,set_tid_address,setresgid,setresuid,shmat,shmctl,shmget,shutdown,socket,stat,sysinfo,uname,unshare,wait4,write,writev | 31 | read-only ${HOME} |