aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/gnome-system-log.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-a-l/gnome-system-log.profile')
-rw-r--r--etc/profile-a-l/gnome-system-log.profile48
1 files changed, 5 insertions, 43 deletions
diff --git a/etc/profile-a-l/gnome-system-log.profile b/etc/profile-a-l/gnome-system-log.profile
index b3bc7499c..0d6116f4f 100644
--- a/etc/profile-a-l/gnome-system-log.profile
+++ b/etc/profile-a-l/gnome-system-log.profile
@@ -6,51 +6,13 @@ include gnome-system-log.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9include disable-common.inc 9# 'net none' breaks dbus
10include disable-devel.inc 10ignore net none
11include disable-exec.inc
12include disable-interpreters.inc
13include disable-programs.inc
14include disable-shell.inc
15include disable-xdg.inc
16 11
17whitelist /var/log
18include whitelist-common.inc
19include whitelist-usr-share-common.inc
20include whitelist-var-common.inc
21
22apparmor
23caps.drop all
24ipc-namespace
25#net none # breaks dbus
26no3d
27nodvd
28# When using 'volatile' storage (https://www.freedesktop.org/software/systemd/man/journald.conf.html),
29# put 'ignore nogroups' and 'ignore noroot' in your gnome-system-log.local.
30nogroups
31noinput
32nonewprivs
33noroot
34nosound
35notv
36nou2f
37novideo
38protocol unix
39seccomp
40
41disable-mnt
42private-bin gnome-system-log 12private-bin gnome-system-log
43private-cache
44private-dev
45private-etc
46private-lib 13private-lib
47private-tmp
48writable-var-log
49
50#dbus-user none
51#dbus-system none
52 14
53memory-deny-write-execute 15memory-deny-write-execute
54# Add 'ignore read-only ${HOME}' to your gnome-system-log.local if you export logs to a file under your ${HOME}. 16
55read-only ${HOME} 17# Redirect
56restrict-namespaces 18include system-log-common.profile