diff options
Diffstat (limited to 'etc')
-rw-r--r-- | etc/standardnotes-desktop.profile | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/etc/standardnotes-desktop.profile b/etc/standardnotes-desktop.profile index 297392b9a..7b89e1add 100644 --- a/etc/standardnotes-desktop.profile +++ b/etc/standardnotes-desktop.profile | |||
@@ -21,7 +21,7 @@ whitelist ${HOME}/Standard Notes Backups | |||
21 | whitelist ${HOME}/.config/Standard Notes | 21 | whitelist ${HOME}/.config/Standard Notes |
22 | include whitelist-var-common.inc | 22 | include whitelist-var-common.inc |
23 | 23 | ||
24 | apparmor | 24 | #apparmor |
25 | caps.drop all | 25 | caps.drop all |
26 | machine-id | 26 | machine-id |
27 | netfilter | 27 | netfilter |
@@ -34,7 +34,8 @@ nosound | |||
34 | notv | 34 | notv |
35 | nou2f | 35 | nou2f |
36 | protocol unix,inet,inet6,netlink | 36 | protocol unix,inet,inet6,netlink |
37 | seccomp | 37 | #seccomp |
38 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mincore,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pivot_root,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | ||
38 | 39 | ||
39 | disable-mnt | 40 | disable-mnt |
40 | private-dev | 41 | private-dev |