From b92cae3a9222decc4aebb447a44ffa127cedd3be Mon Sep 17 00:00:00 2001 From: root Date: Sat, 25 Jun 2016 15:57:38 +0400 Subject: Committer: Paupiah Yashvi Desctiption: Gzip sandbox profile for decompression Changes to be committed: new file: gzip.profile --- etc/gzip.profile | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 etc/gzip.profile diff --git a/etc/gzip.profile b/etc/gzip.profile new file mode 100644 index 000000000..f231c3780 --- /dev/null +++ b/etc/gzip.profile @@ -0,0 +1,19 @@ +################################ +# Gzip profile +################################ +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc +include /etc/firejail/disable-passwdmgr.inc + +blacklist ${HOME}/.wine +blacklist ${HOME}/.ssh + +tracelog +caps.drop all +seccomp +net none +noroot +nosound +nogroups +nonewprivs + -- cgit v1.2.3-54-g00ecf