1 files changed, 5 insertions, 0 deletions
diff --git a/etc/xviewer.profile b/etc/xviewer.profile
index 70ad3b895..b9ff3948a 100644
--- a/etc/xviewer.profile
+++ b/etc/xviewer.profile
@@ -16,12 +16,15 @@ include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
 caps.drop all
+# net none - makes settings immutable
+no3d
 nodvd
 nogroups
 nonewprivs
 noroot
 nosound
 notv
+novideo
 protocol unix
 seccomp
 shell none
@@ -29,7 +32,9 @@ tracelog
 private-bin xviewer
 private-dev
+private-etc fonts
 private-tmp
+memory-deny-write-execute
 noexec ${HOME}
 noexec /tmp

diff --git a/etc/xviewer.profile b/etc/xviewer.profile index 70ad3b895..b9ff3948a 100644 --- a/etc/xviewer.profile +++ b/etc/xviewer.profile
@@ -16,12 +16,15 @@ include /etc/firejail/disable-passwdmgr.inc
16	include /etc/firejail/disable-programs.inc	16	include /etc/firejail/disable-programs.inc
17		17
18	caps.drop all	18	caps.drop all
		19	# net none - makes settings immutable
		20	no3d
19	nodvd	21	nodvd
20	nogroups	22	nogroups
21	nonewprivs	23	nonewprivs
22	noroot	24	noroot
23	nosound	25	nosound
24	notv	26	notv
		27	novideo
25	protocol unix	28	protocol unix
26	seccomp	29	seccomp
27	shell none	30	shell none
@@ -29,7 +32,9 @@ tracelog
29		32
30	private-bin xviewer	33	private-bin xviewer
31	private-dev	34	private-dev
		35	private-etc fonts
32	private-tmp	36	private-tmp
33		37
		38	memory-deny-write-execute
34	noexec ${HOME}	39	noexec ${HOME}
35	noexec /tmp	40	noexec /tmp