1 files changed, 9 insertions, 1 deletions
diff --git a/etc/ricochet.profile b/etc/ricochet.profile
index 423dfb887..6da0e21d5 100644
--- a/etc/ricochet.profile
+++ b/etc/ricochet.profile
@@ -19,14 +19,22 @@ include /etc/firejail/whitelist-common.inc
 caps.drop all
 ipc-namespace
+netfilter
+no3d
+nodvd
 nogroups
+nonewprivs
 noroot
+notv
+novideo
+protocol unix,inet,inet6
 seccomp
 shell none
+disable-mnt
 private-bin ricochet,tor
 private-dev
 #private-etc fonts,tor,X11,alternatives
-noexec /home
+noexec ${HOME}
 noexec /tmp

diff --git a/etc/ricochet.profile b/etc/ricochet.profile index 423dfb887..6da0e21d5 100644 --- a/etc/ricochet.profile +++ b/etc/ricochet.profile
@@ -19,14 +19,22 @@ include /etc/firejail/whitelist-common.inc
19		19
20	caps.drop all	20	caps.drop all
21	ipc-namespace	21	ipc-namespace
		22	netfilter
		23	no3d
		24	nodvd
22	nogroups	25	nogroups
		26	nonewprivs
23	noroot	27	noroot
		28	notv
		29	novideo
		30	protocol unix,inet,inet6
24	seccomp	31	seccomp
25	shell none	32	shell none
26		33
		34	disable-mnt
27	private-bin ricochet,tor	35	private-bin ricochet,tor
28	private-dev	36	private-dev
29	#private-etc fonts,tor,X11,alternatives	37	#private-etc fonts,tor,X11,alternatives
30		38
31	noexec /home	39	noexec ${HOME}
32	noexec /tmp	40	noexec /tmp