1 files changed, 14 insertions, 12 deletions

diff --git a/etc/tar.profile b/etc/tar.profile
index 14fc00d21..1232bb372 100644
--- a/etc/tar.profile
+++ b/etc/tar.profile
@@ -5,17 +5,17 @@ quiet
 # Persistent local customizations
 include tar.local
 # Persistent global definitions
-# added by included profile
-#include globals.local
-
-blacklist /tmp/.X11-unix
+include globals.local
 
+include disable-common.inc
+include disable-devel.inc
 include disable-exec.inc
 include disable-interpreters.inc
-
-ignore noroot
+include disable-passwdmgr.inc
+include disable-programs.inc
 
 apparmor
+caps.drop all
 hostname tar
 ipc-namespace
 machine-id
@@ -24,23 +24,25 @@ no3d
 nodbus
 nodvd
 nogroups
+nonewprivs
+#noroot
 nosound
 notv
 nou2f
 novideo
+protocol unix
+seccomp
 shell none
 tracelog
+x11 none
 
 # support compressed archives
-private-bin sh,bash,tar,gtar,compress,gzip,lzma,xz,bzip2,lbzip2,lzip,lzop
+private-bin bash,bzip2,compress,gtar,gzip,lbzip2,lzip,lzma,lzop,sh,tar,xz
 private-cache
 private-dev
-private-etc alternatives,passwd,group,localtime
+private-etc alternatives,group,localtime,passwd
 private-lib libfakeroot
-
-memory-deny-write-execute
-
 # Debian based distributions need this for 'dpkg --unpack' (incl. synaptic)
 writable-var
 
-include default.profile
+memory-deny-write-execute