From f12c7af205ddd6c0d75587702f01688dc62a86c5 Mon Sep 17 00:00:00 2001
From: smitsohu <smitsohu@gmail.com>
Date: Tue, 22 Aug 2017 01:54:31 +0200
Subject: various profile fixes

---
 etc/eom.profile | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'etc/eom.profile')

diff --git a/etc/eom.profile b/etc/eom.profile
index 6fd069b5c..3fb1fcaf4 100644
--- a/etc/eom.profile
+++ b/etc/eom.profile
@@ -16,6 +16,8 @@ include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
 
 caps.drop all
+# net none - makes settings immutable
+no3d
 nodvd
 nogroups
 nonewprivs
@@ -30,7 +32,9 @@ tracelog
 
 private-bin eom
 private-dev
+private-etc fonts
 private-tmp
 
+memory-deny-write-execute
 noexec ${HOME}
 noexec /tmp
-- 
cgit v1.2.3-70-g09d2