From 0b08f8b7418d657a8652bb5e41655a90efd5750e Mon Sep 17 00:00:00 2001 From: Jan Sonntag Date: Fri, 12 Nov 2021 17:36:00 +0100 Subject: implement review suggestions --- etc/profile-m-z/openstego.profile | 15 +++++---------- 1 file changed, 5 insertions(+), 10 deletions(-) (limited to 'etc') diff --git a/etc/profile-m-z/openstego.profile b/etc/profile-m-z/openstego.profile index a495c3f49..f6622b38d 100644 --- a/etc/profile-m-z/openstego.profile +++ b/etc/profile-m-z/openstego.profile @@ -15,8 +15,8 @@ include disable-common.inc include disable-devel.inc include disable-exec.inc include disable-interpreters.inc +include disable-proc.inc include disable-programs.inc -include disable-passwdmgr.inc mkfile ${HOME}/openstego.ini whitelist ${HOME}/openstego.ini @@ -24,20 +24,14 @@ whitelist ${HOME}/.java whitelist ${PICTURES} whitelist ${DOCUMENTS} whitelist ${DESKTOP} -include whitelist-common.inc - whitelist /usr/share/java +include whitelist-common.inc +include whitelist-run-common.inc +include whitelist-runuser-common.inc include whitelist-usr-share-common.inc include whitelist-var-common.inc -# AppArmor breaks Java interpreter -ignore apparmor - caps.drop all - -# Makes fonts look grainy -#ipc-namespace - machine-id net none no3d @@ -50,6 +44,7 @@ notv nou2f novideo seccomp +seccomp.block-secondary shell none tracelog -- cgit v1.2.3-70-g09d2