From 88f5bd7e28dc63c9122cb1ff8d15d2eae9c4bd79 Mon Sep 17 00:00:00 2001 From: SYN-cook Date: Fri, 24 Mar 2017 15:10:50 +0100 Subject: harden Audacious Audaciousrc is the KFileDialog history --- etc/audacious.profile | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/etc/audacious.profile b/etc/audacious.profile index 63ba9af9c..d12032166 100644 --- a/etc/audacious.profile +++ b/etc/audacious.profile @@ -4,13 +4,21 @@ include /etc/firejail/audacious.local # Audacious media player profile noblacklist ~/.config/audacious +noblacklist ~/.config/Audaciousrc include /etc/firejail/disable-common.inc include /etc/firejail/disable-programs.inc include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc caps.drop all +netfilter nonewprivs noroot protocol unix,inet,inet6 seccomp +shell none +tracelog + +private-bin audacious +private-dev +private-tmp -- cgit v1.2.3-70-g09d2