From c04f0416ea41f44ea9dfb6a9022b7ba628ef07f6 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Tue, 2 Mar 2021 09:48:18 +0000 Subject: Rename etc/inc/chromium-common-hardened.inc to etc/profile-a-l/chromium-common-hardened.profile --- etc/profile-a-l/chromium-common-hardened.profile | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 etc/profile-a-l/chromium-common-hardened.profile (limited to 'etc/profile-a-l') diff --git a/etc/profile-a-l/chromium-common-hardened.profile b/etc/profile-a-l/chromium-common-hardened.profile new file mode 100644 index 000000000..d756eec50 --- /dev/null +++ b/etc/profile-a-l/chromium-common-hardened.profile @@ -0,0 +1,9 @@ +# This file is overwritten during software install. +# Persistent customizations should go in a .local file. +include chromium-common-hardened.local + +caps.drop all +nonewprivs +noroot +protocol unix,inet,inet6,netlink +seccomp !chroot -- cgit v1.2.3-70-g09d2 From cac3861f4749f8bf34844eef51d80f66feea59eb Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Tue, 2 Mar 2021 09:49:48 +0000 Subject: rename chromium-common-hardened.inc --- etc/profile-a-l/chromium-common.profile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'etc/profile-a-l') diff --git a/etc/profile-a-l/chromium-common.profile b/etc/profile-a-l/chromium-common.profile index 1afb2c6e1..b81b1cb36 100644 --- a/etc/profile-a-l/chromium-common.profile +++ b/etc/profile-a-l/chromium-common.profile @@ -32,7 +32,7 @@ include whitelist-var-common.inc # Uncomment the next line (or add it to your chromium-common.local) # if your kernel allows unprivileged userns clone. -#include chromium-common-hardened.inc +#include chromium-common-hardened.profile # Uncomment or put in your chromium-common.local to allow screen sharing under # wayland. -- cgit v1.2.3-70-g09d2 From 25daf98309cf6856569c4b43f68a681640baeb50 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Tue, 2 Mar 2021 09:51:09 +0000 Subject: rename chromium-common-hardened.inc --- etc/profile-a-l/electron.profile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'etc/profile-a-l') diff --git a/etc/profile-a-l/electron.profile b/etc/profile-a-l/electron.profile index d3be07c9d..691616393 100644 --- a/etc/profile-a-l/electron.profile +++ b/etc/profile-a-l/electron.profile @@ -20,7 +20,7 @@ include whitelist-var-common.inc # Uncomment the next line (or add it to your chromium-common.local) # if your kernel allows unprivileged userns clone. -#include chromium-common-hardened.inc +#include chromium-common-hardened.profile apparmor caps.keep sys_admin,sys_chroot -- cgit v1.2.3-70-g09d2