From a9c1a56bc21c6f583292f0f543673730c5737c1b Mon Sep 17 00:00:00 2001 From: rusty-snake <41237666+rusty-snake@users.noreply.github.com> Date: Fri, 30 Apr 2021 10:34:38 +0200 Subject: Harden some game profiles --- etc/profile-m-z/mrrescue.profile | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'etc/profile-m-z/mrrescue.profile') diff --git a/etc/profile-m-z/mrrescue.profile b/etc/profile-m-z/mrrescue.profile index f02a4f357..5b2164bae 100644 --- a/etc/profile-m-z/mrrescue.profile +++ b/etc/profile-m-z/mrrescue.profile @@ -8,18 +8,23 @@ include globals.local noblacklist ${HOME}/.local/share/love +include allow-bin-sh.inc +include allow-lua.inc + include disable-common.inc include disable-devel.inc include disable-exec.inc include disable-interpreters.inc include disable-passwdmgr.inc include disable-programs.inc +include disable-shell.inc include disable-xdg.inc mkdir ${HOME}/.local/share/love whitelist ${HOME}/.local/share/love whitelist /usr/share/mrrescue include whitelist-common.inc +include whitelist-runuser-common.inc include whitelist-usr-share-common.inc include whitelist-var-common.inc @@ -35,6 +40,7 @@ nou2f novideo protocol unix,netlink seccomp +seccomp.block-secondary shell none tracelog -- cgit v1.2.3-54-g00ecf