From 40a51e179d90f54a20c539567adeed1ea0b94d78 Mon Sep 17 00:00:00 2001 From: smitsohu Date: Tue, 8 Aug 2017 21:31:50 +0200 Subject: various little profile fixes and enhancements (#1442) * add novideo * add novideo * add novideo * put noexec last * blacklist Clementine configuration and database * blacklist Clementine configuration and database * add novideo * add novideo, permit access to ~/.java * add novideo * spoof machine-id * mimeapps.list is already in whitelist-common.inc * ~/.local/share/applications is already read-only see disable-common.inc * mimeapps.list is already in whitelist-common.inc * ~/.local/share/applications is already read-only see disable-common.inc * drop machine-id option private-etc hides it anyway --- etc/gwenview.profile | 1 + 1 file changed, 1 insertion(+) (limited to 'etc/gwenview.profile') diff --git a/etc/gwenview.profile b/etc/gwenview.profile index 0f2be604b..0bc47d301 100644 --- a/etc/gwenview.profile +++ b/etc/gwenview.profile @@ -23,6 +23,7 @@ caps.drop all nogroups nonewprivs noroot +novideo protocol unix seccomp shell none -- cgit v1.2.3-70-g09d2