aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/neverball.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-m-z/neverball.profile')
-rw-r--r--etc/profile-m-z/neverball.profile16
1 files changed, 14 insertions, 2 deletions
diff --git a/etc/profile-m-z/neverball.profile b/etc/profile-m-z/neverball.profile
index 84c634549..5c7c2b3da 100644
--- a/etc/profile-m-z/neverball.profile
+++ b/etc/profile-m-z/neverball.profile
@@ -14,13 +14,19 @@ include disable-exec.inc
14include disable-interpreters.inc 14include disable-interpreters.inc
15include disable-passwdmgr.inc 15include disable-passwdmgr.inc
16include disable-programs.inc 16include disable-programs.inc
17include disable-shell.inc
18include disable-xdg.inc
17 19
18mkdir ${HOME}/.neverball 20mkdir ${HOME}/.neverball
19whitelist ${HOME}/.neverball 21whitelist ${HOME}/.neverball
22whitelist /usr/share/neverball
20include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc
21 27
22caps.drop all 28caps.drop all
23netfilter 29net none
24nodvd 30nodvd
25nogroups 31nogroups
26nonewprivs 32nonewprivs
@@ -28,12 +34,18 @@ noroot
28notv 34notv
29nou2f 35nou2f
30novideo 36novideo
31protocol unix,netlink 37protocol unix
32seccomp 38seccomp
39seccomp.block-secondary
33shell none 40shell none
41tracelog
34 42
35disable-mnt 43disable-mnt
36private-bin neverball 44private-bin neverball
45private-cache
37private-dev 46private-dev
47private-etc alternatives,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,fonts,machine-id
38private-tmp 48private-tmp
39 49
50dbus-user none
51dbus-system none