From a6954438f3cf3175edccc92489a6d1cae1d1d5cf Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Sun, 16 Jun 2019 19:59:21 +0200 Subject: some fixes in profile.template --- etc/templates/profile.template | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'etc/templates') diff --git a/etc/templates/profile.template b/etc/templates/profile.template index 9ca711719..0ccb3fae0 100644 --- a/etc/templates/profile.template +++ b/etc/templates/profile.template @@ -30,8 +30,8 @@ # MKDIRS # WHITELISTS # WHITELIST INCLUDES -# OPTIONS (no*) -# PRIVATE OPTIONS (disable-mnt, private-*) +# OPTIONS (caps*, net*, no*, protocol, seccomp, shell none, tracelog) +# PRIVATE OPTIONS (disable-mnt, private-*, writable-*) # SPECIAL OPTIONS (mdwx, noexec, read-only, join-or-start) # REDIRECT INCLUDES # @@ -98,7 +98,7 @@ # in PROFILE.local but still be protected by BLACKLISTS section # (further explanation at https://github.com/netblue30/firejail/issues/1569) #mkdir PATH -#mkfile PATH +##mkfile PATH #whitelist PATH #include whitelist-common.inc #include whitelist-var-common.inc @@ -136,7 +136,7 @@ # private-etc templates (see also #1734, #2093) # Common: ld.so.cache,ld.so.preload,ld.so.conf,ld.so.conf.d,locale,locale.alias,locale.conf,localtime,alternatives,mime.types,xdg # Extra: magic,magic.mgc,passwd,group -# Networking: ca-certificates,ssl,pki,crypto-policies,nsswitch.conf,resolv,conf,hosts,host.conf,hostname,protocols,services,rpc +# Networking: ca-certificates,ssl,pki,crypto-policies,nsswitch.conf,resolv.conf,hosts,host.conf,hostname,protocols,services,rpc # Extra: proxychains.conf,gai.conf # Sound: alsa,asound.conf,pulse,machine-id # GUI: fonts,pango,X11 -- cgit v1.2.3-70-g09d2