From 135e29d22a145544ba7245a489649385cb51484b Mon Sep 17 00:00:00 2001 From: smitsohu Date: Fri, 15 Mar 2019 14:18:14 +0100 Subject: harden clamtk profile, strings profile cleanup --- etc/clamtk.profile | 5 ++--- etc/strings.profile | 2 -- 2 files changed, 2 insertions(+), 5 deletions(-) diff --git a/etc/clamtk.profile b/etc/clamtk.profile index a93523acc..bc09808cb 100644 --- a/etc/clamtk.profile +++ b/etc/clamtk.profile @@ -5,6 +5,8 @@ include clamtk.local # Persistent global definitions include globals.local +include disable-exec.inc + caps.drop all ipc-namespace net none @@ -23,6 +25,3 @@ seccomp shell none private-dev - -noexec ${HOME} -noexec /tmp diff --git a/etc/strings.profile b/etc/strings.profile index cacf919f5..0caecdf7b 100644 --- a/etc/strings.profile +++ b/etc/strings.profile @@ -29,7 +29,5 @@ private-etc alternatives private-lib libfakeroot memory-deny-write-execute -noexec ${HOME} -noexec /tmp include default.profile -- cgit v1.2.3-54-g00ecf