From 0dba38435ef92ccc01cc9ff23b69df55489ec983 Mon Sep 17 00:00:00 2001 From: Tad Date: Wed, 5 Jul 2017 09:40:54 -0400 Subject: Harden profiles - Added 'disable-devel.conf' to many profiles - Added 'disable-mnt' to many profiles - Added 'noexec' to many profiles - Removed 'netfilter' and 'net none' from profiles with 'protocol unix' - Cleaned up profiles using defaults --- etc/xpra.profile | 1 - 1 file changed, 1 deletion(-) (limited to 'etc/xpra.profile') diff --git a/etc/xpra.profile b/etc/xpra.profile index a41ee2613..c8bb3ef52 100644 --- a/etc/xpra.profile +++ b/etc/xpra.profile @@ -23,7 +23,6 @@ include /etc/firejail/disable-passwdmgr.inc caps.drop all # xpra needs to be allowed access to the abstract Unix socket namespace. -#net none nogroups nonewprivs # In noroot mode, xpra cannot create a socket in the real /tmp/.X11-unix. -- cgit v1.2.3-54-g00ecf