diff options
Diffstat (limited to 'etc/parole.profile')
-rw-r--r-- | etc/parole.profile | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/etc/parole.profile b/etc/parole.profile index 3369b191c..9f63e5b16 100644 --- a/etc/parole.profile +++ b/etc/parole.profile | |||
@@ -2,13 +2,15 @@ | |||
2 | include /etc/firejail/disable-common.inc | 2 | include /etc/firejail/disable-common.inc |
3 | include /etc/firejail/disable-programs.inc | 3 | include /etc/firejail/disable-programs.inc |
4 | include /etc/firejail/disable-devel.inc | 4 | include /etc/firejail/disable-devel.inc |
5 | include /etc/firejail/disable-terminals.inc | 5 | |
6 | private-etc passwd,group,fonts | 6 | private-etc passwd,group,fonts |
7 | private-bin parole,dbus-launch | 7 | private-bin parole,dbus-launch |
8 | |||
8 | blacklist ${HOME}/.pki/nssdb | 9 | blacklist ${HOME}/.pki/nssdb |
9 | blacklist ${HOME}/.lastpass | 10 | blacklist ${HOME}/.lastpass |
10 | blacklist ${HOME}/.keepassx | 11 | blacklist ${HOME}/.keepassx |
11 | blacklist ${HOME}/.password-store | 12 | blacklist ${HOME}/.password-store |
13 | |||
12 | caps.drop all | 14 | caps.drop all |
13 | seccomp | 15 | seccomp |
14 | protocol unix,inet,inet6 | 16 | protocol unix,inet,inet6 |