From f413040c5e4c052b4bc81706b9f12e5dcf0fa5b3 Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Sun, 2 Jun 2019 17:36:19 +0200 Subject: many profile cleanups (2) --- etc/xzdec.profile | 21 ++++++++++++++++----- 1 file changed, 16 insertions(+), 5 deletions(-) (limited to 'etc/xzdec.profile') diff --git a/etc/xzdec.profile b/etc/xzdec.profile index a1f265c1e..3adaa557c 100644 --- a/etc/xzdec.profile +++ b/etc/xzdec.profile @@ -5,23 +5,34 @@ quiet # Persistent local customizations include xzdec.local # Persistent global definitions -# added by included profile -#include globals.local +include globals.local blacklist /tmp/.X11-unix -ignore noroot +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc + +caps.drop all +ipc-namespace +machine-id net none no3d nodbus nodvd +#nogroups +nonewprivs +#noroot nosound notv nou2f novideo +protocol unix +seccomp shell none tracelog private-dev - -include default.profile -- cgit v1.2.3-70-g09d2