From 4c935269605f9b53578b66b9d9c5596ccb886f0d Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Sun, 16 Jun 2019 13:04:28 +0200 Subject: many profile cleanup (4) containing: - files forgotten in 4beaf8f9 - workarounds for #903 - commented useless private-etc lines removed - remove commented seccomp.keep lines - much more --- etc/skanlite.profile | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'etc/skanlite.profile') diff --git a/etc/skanlite.profile b/etc/skanlite.profile index 76b050d18..c10be717b 100644 --- a/etc/skanlite.profile +++ b/etc/skanlite.profile @@ -16,7 +16,6 @@ include disable-programs.inc include disable-xdg.inc caps.drop all -# net none netfilter # nodbus nodvd @@ -31,6 +30,6 @@ protocol unix,inet,inet6,netlink seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice shell none -# private-bin skanlite,kbuildsycoca4,kdeinit4 +# private-bin kbuildsycoca4,kdeinit4,skanlite # private-dev # private-tmp -- cgit v1.2.3-70-g09d2