From fa10ab0e093a4224b16491273b0162b0e0a77a3a Mon Sep 17 00:00:00 2001 From: valoq Date: Sat, 19 Nov 2016 21:57:42 +0100 Subject: many new profiles --- etc/amarok.profile | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 etc/amarok.profile (limited to 'etc/amarok.profile') diff --git a/etc/amarok.profile b/etc/amarok.profile new file mode 100644 index 000000000..962865790 --- /dev/null +++ b/etc/amarok.profile @@ -0,0 +1,19 @@ +# amorak profile +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc + +caps.drop all +netfilter +nogroups +nonewprivs +noroot +shell none +#seccomp +protocol unix,inet,inet6 + +#private-bin amorak +private-dev +private-tmp +#private-etc none -- cgit v1.2.3-54-g00ecf From b93b223507d3cb1a8b8f1c96657134d4c23da9a1 Mon Sep 17 00:00:00 2001 From: valoq Date: Sat, 19 Nov 2016 23:06:57 +0100 Subject: fixed typo --- etc/amarok.profile | 4 ++-- etc/k3b.profile | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) (limited to 'etc/amarok.profile') diff --git a/etc/amarok.profile b/etc/amarok.profile index 962865790..8d5b35d47 100644 --- a/etc/amarok.profile +++ b/etc/amarok.profile @@ -1,4 +1,4 @@ -# amorak profile +# amarok profile include /etc/firejail/disable-common.inc include /etc/firejail/disable-programs.inc include /etc/firejail/disable-devel.inc @@ -13,7 +13,7 @@ shell none #seccomp protocol unix,inet,inet6 -#private-bin amorak +#private-bin amarok private-dev private-tmp #private-etc none diff --git a/etc/k3b.profile b/etc/k3b.profile index 6e16d233c..8a5fff0c6 100644 --- a/etc/k3b.profile +++ b/etc/k3b.profile @@ -15,7 +15,7 @@ seccomp protocol unix # private-bin -private-dev -private-tmp +# private-dev +# private-tmp # private-etc -- cgit v1.2.3-54-g00ecf