From 8a0725cd013564500af985c728c1589ae9eb47f7 Mon Sep 17 00:00:00 2001 From: smitsohu Date: Sun, 3 Sep 2017 21:34:07 +0200 Subject: tighten capability sets --- etc/dnscrypt-proxy.profile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'etc/dnscrypt-proxy.profile') diff --git a/etc/dnscrypt-proxy.profile b/etc/dnscrypt-proxy.profile index a1ccfbe22..86af9c7b3 100644 --- a/etc/dnscrypt-proxy.profile +++ b/etc/dnscrypt-proxy.profile @@ -17,7 +17,7 @@ include /etc/firejail/disable-passwdmgr.inc include /etc/firejail/disable-programs.inc caps -# caps.keep ipc_lock,net_bind_service,setgid,setuid,sys_chroot,sys_resource +# caps.keep ipc_lock,net_bind_service,setgid,setuid,sys_chroot no3d nodvd nonewprivs -- cgit v1.2.3-70-g09d2