From 6da539894c7ecbcf43d3e9910c90f25ea5eb662d Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Wed, 26 Jun 2019 18:50:46 +0000 Subject: Hardening a few profiles (#2800) * Harden curl.profile * Harden dnscrypt-proxy.profile * Harden unbound.profile * Harden unbound.profile --- etc/curl.profile | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'etc/curl.profile') diff --git a/etc/curl.profile b/etc/curl.profile index 76beee46a..d8282b972 100644 --- a/etc/curl.profile +++ b/etc/curl.profile @@ -17,8 +17,11 @@ include disable-passwdmgr.inc include disable-programs.inc caps.drop all +ipc-namespace +machine-id netfilter no3d +nodbus nodvd nogroups nonewprivs @@ -27,7 +30,7 @@ nosound notv nou2f novideo -protocol unix,inet,inet6 +protocol inet,inet6 seccomp shell none -- cgit v1.2.3-54-g00ecf