From 77a97aae04c6ed92cc13779d6b4c25a5155a7315 Mon Sep 17 00:00:00 2001 From: valoq Date: Wed, 21 Dec 2016 10:34:28 +0100 Subject: profile improvements --- etc/atool.profile | 3 +++ etc/git.profile | 4 +++- 2 files changed, 6 insertions(+), 1 deletion(-) (limited to 'etc') diff --git a/etc/atool.profile b/etc/atool.profile index 3fbfb9fc7..578a88fc7 100644 --- a/etc/atool.profile +++ b/etc/atool.profile @@ -13,9 +13,12 @@ protocol unix seccomp netfilter net none +no3d shell none tracelog +blacklist /tmp/.X11-unix + # private-bin atool private-tmp private-dev diff --git a/etc/git.profile b/etc/git.profile index d60e58c03..80e534e20 100644 --- a/etc/git.profile +++ b/etc/git.profile @@ -12,15 +12,17 @@ include /etc/firejail/disable-common.inc include /etc/firejail/disable-programs.inc include /etc/firejail/disable-passwdmgr.inc - caps.drop all netfilter nogroups nonewprivs noroot nosound +no3d protocol unix,inet,inet6 seccomp shell none +blacklist /tmp/.X11-unix + private-dev -- cgit v1.2.3-54-g00ecf