aboutsummaryrefslogtreecommitdiffstats
path: root/etc/unbound.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/unbound.profile')
-rw-r--r--etc/unbound.profile17
1 files changed, 9 insertions, 8 deletions
diff --git a/etc/unbound.profile b/etc/unbound.profile
index 5bc350e8d..6e4b5ed1c 100644
--- a/etc/unbound.profile
+++ b/etc/unbound.profile
@@ -2,21 +2,21 @@
2# Description: Validating, recursive, caching DNS resolver 2# Description: Validating, recursive, caching DNS resolver
3# This file is overwritten after every install/update 3# This file is overwritten after every install/update
4# Persistent local customizations 4# Persistent local customizations
5include /etc/firejail/unbound.local 5include unbound.local
6# Persistent global definitions 6# Persistent global definitions
7include /etc/firejail/globals.local 7include globals.local
8 8
9blacklist /tmp/.X11-unix 9blacklist /tmp/.X11-unix
10 10
11noblacklist /sbin 11noblacklist /sbin
12noblacklist /usr/sbin 12noblacklist /usr/sbin
13 13
14include /etc/firejail/disable-common.inc 14include disable-common.inc
15include /etc/firejail/disable-devel.inc 15include disable-devel.inc
16include /etc/firejail/disable-interpreters.inc 16include disable-interpreters.inc
17include /etc/firejail/disable-passwdmgr.inc 17include disable-passwdmgr.inc
18include /etc/firejail/disable-programs.inc 18include disable-programs.inc
19include /etc/firejail/disable-xdg.inc 19include disable-xdg.inc
20 20
21whitelist /var/lib/unbound 21whitelist /var/lib/unbound
22whitelist /var/run 22whitelist /var/run
@@ -27,6 +27,7 @@ nodvd
27nonewprivs 27nonewprivs
28nosound 28nosound
29notv 29notv
30nou2f
30novideo 31novideo
31seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open 32seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open
32writable-var 33writable-var