From 248bc971750a533888c61d0b97d0ff35542fe71d Mon Sep 17 00:00:00 2001
From: vismir2 <vis@mailbox.org>
Date: Sun, 2 Oct 2016 15:49:26 +0200
Subject: hardened mupdf

---
 etc/mupdf.profile | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'etc')

diff --git a/etc/mupdf.profile b/etc/mupdf.profile
index 6f2db511b..d1a157c3c 100644
--- a/etc/mupdf.profile
+++ b/etc/mupdf.profile
@@ -11,8 +11,14 @@ noroot
 nosound
 protocol unix
 seccomp
+netfilter
 shell none
 tracelog
 
+private-bin mupdf
 private-tmp
 private-dev
+
+# mupdf will never write anything
+read-only ${HOME}
+
-- 
cgit v1.2.3-54-g00ecf