From d47e4a63ceeeca7ba2cc30da124380a8b7d39372 Mon Sep 17 00:00:00 2001
From: smitsohu <smitsohu@gmail.com>
Date: Sun, 11 Aug 2019 15:27:32 +0200
Subject: update and harden file.profile

---
 etc/file.profile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'etc')

diff --git a/etc/file.profile b/etc/file.profile
index 69fa7d8cd..242ffe695 100644
--- a/etc/file.profile
+++ b/etc/file.profile
@@ -33,10 +33,11 @@ shell none
 tracelog
 x11 none
 
-#private-bin file
+#private-bin bzip2,file,gzip,lrzip,lz4,lzip,xz,zstd
 private-cache
 private-dev
 private-etc alternatives,localtime,magic,magic.mgc
 private-lib libarchive.so.*,libfakeroot,libmagic.so.*
 
 memory-deny-write-execute
+read-only ${HOME}
-- 
cgit v1.2.3-70-g09d2