From 2e1b94c4251e6a841672f3df96e3d503d380ef1b Mon Sep 17 00:00:00 2001
From: Fred-Barclay <Fred-Barclay@users.noreply.github.com>
Date: Sun, 10 Jul 2016 00:00:11 +1000
Subject: private-bin conversion

---
 etc/warzone2100.profile | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

(limited to 'etc/warzone2100.profile')

diff --git a/etc/warzone2100.profile b/etc/warzone2100.profile
index ceeaca012..ff37e2800 100644
--- a/etc/warzone2100.profile
+++ b/etc/warzone2100.profile
@@ -6,15 +6,20 @@ include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
 
+# Whitelist
+mkdir ~/.warzone2100-3.1
+whitelist ~/.warzone2100-3.1
+
 # Call these options
 caps.drop all
 netfilter
+nogroups
 nonewprivs
 noroot
 protocol unix,inet,inet6,netlink
 seccomp
+shell none
 tracelog
 
-# Whitelist
-mkdir ~/.warzone2100-3.1
-whitelist ~/.warzone2100-3.1
+private-bin warzone2100
+private-dev
-- 
cgit v1.2.3-70-g09d2