From 8ef2c87931fa83c2d1fd6b35f23ac650adee6355 Mon Sep 17 00:00:00 2001 From: smitsohu Date: Sun, 29 Oct 2017 13:06:19 +0100 Subject: fix and harden various profiles --- etc/calligra.profile | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'etc/calligra.profile') diff --git a/etc/calligra.profile b/etc/calligra.profile index a57694752..f09716bc3 100644 --- a/etc/calligra.profile +++ b/etc/calligra.profile @@ -5,7 +5,7 @@ include /etc/firejail/calligra.local # Persistent global definitions include /etc/firejail/globals.local -blacklist /run/user/*/bus +# blacklist /run/user/*/bus include /etc/firejail/disable-common.inc include /etc/firejail/disable-devel.inc @@ -14,7 +14,7 @@ include /etc/firejail/disable-programs.inc caps.drop all ipc-namespace -net none +# net none nodvd nogroups nonewprivs @@ -25,8 +25,8 @@ protocol unix seccomp shell none -private-bin calligra,calligraauthor,calligraconverter,calligraflow,calligraplan,calligraplanwork,calligrasheets,calligrastage,calligrawords,dbus-launch +private-bin calligra,calligraauthor,calligraconverter,calligraflow,calligraplan,calligraplanwork,calligrasheets,calligrastage,calligrawords,dbus-launch,kbuildsycoca4,kdeinit4 private-dev -#noexec ${HOME} +# noexec ${HOME} noexec /tmp -- cgit v1.2.3-54-g00ecf