From 55938d07a58d29ceb893e4554a4ddf3c41810fc9 Mon Sep 17 00:00:00 2001 From: smitsohu Date: Sun, 22 Oct 2017 11:34:51 +0200 Subject: disable non-abstract session bus address systematically blacklist /run/user/*/bus in all profiles with 'net none'. targets distros like Fedora --- etc/atom.profile | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'etc/atom.profile') diff --git a/etc/atom.profile b/etc/atom.profile index db3cbc687..dc8db46dc 100644 --- a/etc/atom.profile +++ b/etc/atom.profile @@ -5,6 +5,8 @@ include /etc/firejail/atom.local # Persistent global definitions include /etc/firejail/globals.local +# blacklist /run/user/*/bus + noblacklist ~/.atom noblacklist ~/.config/Atom @@ -13,6 +15,7 @@ include /etc/firejail/disable-passwdmgr.inc include /etc/firejail/disable-programs.inc caps.drop all +# net none netfilter nodvd nogroups @@ -23,7 +26,6 @@ notv novideo protocol unix,inet,inet6,netlink seccomp -# net none shell none private-dev -- cgit v1.2.3-70-g09d2