1 files changed, 8 insertions, 3 deletions

diff --git a/etc/warzone2100.profile b/etc/warzone2100.profile
index ceeaca012..ff37e2800 100644
--- a/etc/warzone2100.profile
+++ b/etc/warzone2100.profile
@@ -6,15 +6,20 @@ include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
 
+# Whitelist
+mkdir ~/.warzone2100-3.1
+whitelist ~/.warzone2100-3.1
+
 # Call these options
 caps.drop all
 netfilter
+nogroups
 nonewprivs
 noroot
 protocol unix,inet,inet6,netlink
 seccomp
+shell none
 tracelog
 
-# Whitelist
-mkdir ~/.warzone2100-3.1
-whitelist ~/.warzone2100-3.1
+private-bin warzone2100
+private-dev