From b59225f5d987d0467c659b0b5c0630009d519e98 Mon Sep 17 00:00:00 2001 From: smitsohu Date: Tue, 18 Jun 2019 18:52:18 +0200 Subject: use 'x11 none' option ... instead of just blacklisting the X11 socket. Systematically added to all profiles with 'net none' and 'blacklist /tmp/.X11-unix', and a few more --- etc/strings.profile | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'etc/strings.profile') diff --git a/etc/strings.profile b/etc/strings.profile index ace0d9351..621e8e177 100644 --- a/etc/strings.profile +++ b/etc/strings.profile @@ -6,8 +6,6 @@ include strings.local # Persistent global definitions include globals.local -blacklist /tmp/.X11-unix - include disable-common.inc include disable-devel.inc include disable-exec.inc @@ -34,6 +32,7 @@ protocol unix seccomp shell none tracelog +x11 none #private private-bin strings -- cgit v1.2.3-54-g00ecf