From 3c3602fe4e747f3489c917f4de991c9043df9751 Mon Sep 17 00:00:00 2001 From: Tad Date: Sat, 16 Sep 2017 14:11:43 -0400 Subject: Harden 25 profiles --- etc/krita.profile | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'etc/krita.profile') diff --git a/etc/krita.profile b/etc/krita.profile index d60ef2fa7..2dfd084ef 100644 --- a/etc/krita.profile +++ b/etc/krita.profile @@ -14,12 +14,19 @@ include /etc/firejail/disable-programs.inc caps.drop all ipc-namespace net none +nodvd nogroups +nonewprivs noroot +nosound +notv +novideo +protocol unix seccomp shell none private-dev +private-tmp noexec /home noexec /tmp -- cgit v1.2.3-70-g09d2