From 7770d5cec04ca36648925550cb92f15afce673fd Mon Sep 17 00:00:00 2001 From: startx2017 Date: Tue, 4 Sep 2018 07:37:58 -0400 Subject: mainline merges --- etc/dig.profile | 47 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) create mode 100644 etc/dig.profile (limited to 'etc') diff --git a/etc/dig.profile b/etc/dig.profile new file mode 100644 index 000000000..4b6ab0975 --- /dev/null +++ b/etc/dig.profile @@ -0,0 +1,47 @@ +quiet +# Firejail profile for dig +# This file is overwritten after every install/update +# Persistent local customizations +include /etc/firejail/dig.local +# Persistent global definitions +include /etc/firejail/globals.local + +include /etc/firejail/disable-common.inc +# include /etc/firejail/disable-devel.inc +# include /etc/firejail/disable-interpreters.inc +include /etc/firejail/disable-passwdmgr.inc +include /etc/firejail/disable-programs.inc +#include /etc/firejail/disable-xdg.inc + +whitelist ~/.digrc +include /etc/firejail/whitelist-common.inc +include /etc/firejail/whitelist-var-common.inc + +caps.drop all +# ipc-namespace +netfilter +no3d +nodbus +nodvd +nogroups +nonewprivs +noroot +nosound +notv +novideo +protocol unix,inet,inet6 +seccomp +shell none + +disable-mnt +private +private-bin sh,bash,dig +private-cache +private-dev +# private-etc resolv.conf +private-lib +private-tmp + +memory-deny-write-execute +# noexec ${HOME} +# noexec /tmp -- cgit v1.2.3-70-g09d2