From 096d0de5f8bb253d0c1035796464bc5982f06f81 Mon Sep 17 00:00:00 2001 From: rusty-snake <41237666+rusty-snake@users.noreply.github.com> Date: Mon, 16 Nov 2020 11:41:35 +0100 Subject: from my overrides - add seccomp.block-secondary to a lot profiles - add wruc to firefox-common and ignore it in TB and firefox-common-addons - harden dia, gnome-keyring, libreoffice, megaglest, pngquant, ghostwriter, rhythmbox, sqlitebrowser --- etc/profile-a-l/ghostwriter.profile | 2 ++ 1 file changed, 2 insertions(+) (limited to 'etc/profile-a-l/ghostwriter.profile') diff --git a/etc/profile-a-l/ghostwriter.profile b/etc/profile-a-l/ghostwriter.profile index 5bb410278..c15174815 100644 --- a/etc/profile-a-l/ghostwriter.profile +++ b/etc/profile-a-l/ghostwriter.profile @@ -26,6 +26,7 @@ whitelist /usr/share/texlive whitelist /usr/share/pandoc* include whitelist-runuser-common.inc include whitelist-usr-share-common.inc +include whitelist-var-common.inc apparmor caps.drop all @@ -41,6 +42,7 @@ nou2f novideo protocol unix,inet,inet6,netlink seccomp !chroot +seccomp.block-secondary shell none #tracelog -- breaks -- cgit v1.2.3-70-g09d2