diff options
Diffstat (limited to 'etc/transmission-daemon.profile')
-rw-r--r-- | etc/transmission-daemon.profile | 43 |
1 files changed, 11 insertions, 32 deletions
diff --git a/etc/transmission-daemon.profile b/etc/transmission-daemon.profile index 9a6052ada..1c092ad17 100644 --- a/etc/transmission-daemon.profile +++ b/etc/transmission-daemon.profile | |||
@@ -5,40 +5,19 @@ quiet | |||
5 | # Persistent local customizations | 5 | # Persistent local customizations |
6 | include transmission-daemon.local | 6 | include transmission-daemon.local |
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | # added by included profile |
9 | #include globals.local | ||
9 | 10 | ||
10 | noblacklist ${HOME}/.cache/transmission | 11 | whitelist /var/lib/transmission |
11 | noblacklist ${HOME}/.config/transmission | ||
12 | 12 | ||
13 | include disable-common.inc | 13 | caps.keep ipc_lock,net_bind_service,setgid,setuid,sys_chroot |
14 | include disable-devel.inc | ||
15 | include disable-exec.inc | ||
16 | include disable-interpreters.inc | ||
17 | include disable-passwdmgr.inc | ||
18 | include disable-programs.inc | ||
19 | 14 | ||
20 | apparmor | 15 | #private-bin transmission-daemon |
21 | caps.drop all | ||
22 | machine-id | ||
23 | netfilter | ||
24 | nodbus | ||
25 | nodvd | ||
26 | nogroups | ||
27 | nonewprivs | ||
28 | noroot | ||
29 | nosound | ||
30 | notv | ||
31 | nou2f | ||
32 | novideo | ||
33 | protocol inet,inet6 | ||
34 | seccomp | ||
35 | shell none | ||
36 | tracelog | ||
37 | |||
38 | # private-bin transmission-daemon | ||
39 | private-dev | ||
40 | private-etc alternatives,ca-certificates,crypto-policies,nsswitch.conf,pki,resolv.conf,ssl | 16 | private-etc alternatives,ca-certificates,crypto-policies,nsswitch.conf,pki,resolv.conf,ssl |
41 | private-lib | ||
42 | private-tmp | ||
43 | 17 | ||
44 | memory-deny-write-execute | 18 | read-write /var/lib/transmission |
19 | writable-var-log | ||
20 | writable-run-user | ||
21 | |||
22 | # Redirect | ||
23 | include transmission-common.profile | ||