From e1af15d8e713d53aa9b7d7eeb7cee4336a8323f5 Mon Sep 17 00:00:00 2001 From: Tad Date: Thu, 21 Sep 2017 08:07:48 -0400 Subject: Fixup 17a2edf9be3d1144db1a262c5358bf190c9b272b --- arch-audit.profile | 40 ---------------------------------------- etc/arch-audit.profile | 40 ++++++++++++++++++++++++++++++++++++++++ 2 files changed, 40 insertions(+), 40 deletions(-) delete mode 100644 arch-audit.profile create mode 100644 etc/arch-audit.profile diff --git a/arch-audit.profile b/arch-audit.profile deleted file mode 100644 index d8ed64811..000000000 --- a/arch-audit.profile +++ /dev/null @@ -1,40 +0,0 @@ -# Firejail profile for arch-audit -# This file is overwritten after every install/update -quiet -# Persistent local customizations -include /etc/firejail/arch-audit.local -# Persistent global definitions -include /etc/firejail/globals.local - - -noblacklist /var/lib/pacman - -include /etc/firejail/disable-common.inc -include /etc/firejail/disable-devel.inc -include /etc/firejail/disable-passwdmgr.inc -include /etc/firejail/disable-programs.inc - -caps.drop all -ipc-namespace -netfilter -no3d -nodvd -nogroups -nonewprivs -noroot -nosound -notv -novideo -protocol unix,inet,inet6 -seccomp -shell none - -disable-mnt -private -private-bin arch-audit -private-dev -private-tmp - -memory-deny-write-execute -noexec ${HOME} -noexec /tmp diff --git a/etc/arch-audit.profile b/etc/arch-audit.profile new file mode 100644 index 000000000..d8ed64811 --- /dev/null +++ b/etc/arch-audit.profile @@ -0,0 +1,40 @@ +# Firejail profile for arch-audit +# This file is overwritten after every install/update +quiet +# Persistent local customizations +include /etc/firejail/arch-audit.local +# Persistent global definitions +include /etc/firejail/globals.local + + +noblacklist /var/lib/pacman + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc +include /etc/firejail/disable-programs.inc + +caps.drop all +ipc-namespace +netfilter +no3d +nodvd +nogroups +nonewprivs +noroot +nosound +notv +novideo +protocol unix,inet,inet6 +seccomp +shell none + +disable-mnt +private +private-bin arch-audit +private-dev +private-tmp + +memory-deny-write-execute +noexec ${HOME} +noexec /tmp -- cgit v1.2.3-70-g09d2