From 096d0de5f8bb253d0c1035796464bc5982f06f81 Mon Sep 17 00:00:00 2001 From: rusty-snake <41237666+rusty-snake@users.noreply.github.com> Date: Mon, 16 Nov 2020 11:41:35 +0100 Subject: from my overrides - add seccomp.block-secondary to a lot profiles - add wruc to firefox-common and ignore it in TB and firefox-common-addons - harden dia, gnome-keyring, libreoffice, megaglest, pngquant, ghostwriter, rhythmbox, sqlitebrowser --- etc/templates/profile.template | 1 + 1 file changed, 1 insertion(+) (limited to 'etc/templates') diff --git a/etc/templates/profile.template b/etc/templates/profile.template index d57306aee..3d37fc827 100644 --- a/etc/templates/profile.template +++ b/etc/templates/profile.template @@ -157,6 +157,7 @@ include globals.local #seccomp ##seccomp !chroot ##seccomp.drop SYSCALLS (see syscalls.txt) +#seccomp.block-secondary #shell none #tracelog # Prefer 'x11 none' instead of 'blacklist /tmp/.X11-unix' if 'net none' is set -- cgit v1.2.3-54-g00ecf