1 files changed, 7 insertions, 2 deletions

diff --git a/etc/profile-a-l/dnsmasq.profile b/etc/profile-a-l/dnsmasq.profile
index 2db1548a4..13efd2fa8 100644
--- a/etc/profile-a-l/dnsmasq.profile
+++ b/etc/profile-a-l/dnsmasq.profile
@@ -9,9 +9,10 @@ include globals.local
 
 noblacklist /sbin
 noblacklist /usr/sbin
+noblacklist /var/lib/libvirt
 
 blacklist /tmp/.X11-unix
-blacklist ${RUNUSER}/wayland-*
+blacklist ${RUNUSER}
 
 include disable-common.inc
 include disable-devel.inc
@@ -19,6 +20,9 @@ include disable-interpreters.inc
 include disable-programs.inc
 include disable-xdg.inc
 
+whitelist /var/lib/libvirt/dnsmasq
+whitelist /var/run
+
 caps.keep net_admin,net_bind_service,net_raw,setgid,setuid
 no3d
 nodvd
@@ -33,5 +37,6 @@ seccomp
 
 disable-mnt
 private
-private-cache
 private-dev
+private-tmp
+writable-var