From d90d9109f68ebcc0b297a12f456aee20a1c5b3d3 Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Thu, 2 Jan 2020 10:22:59 +0100 Subject: Harden wget.profile --- etc/wget.profile | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'etc') diff --git a/etc/wget.profile b/etc/wget.profile index 4bf354652..c034a3f0e 100644 --- a/etc/wget.profile +++ b/etc/wget.profile @@ -19,6 +19,8 @@ include whitelist-usr-share-common.inc include whitelist-var-common.inc caps.drop all +ipc-namespace +machine-id netfilter no3d nodvd @@ -32,9 +34,11 @@ novideo protocol unix,inet,inet6 seccomp shell none +tracelog # private-bin wget private-dev # private-etc alternatives,ca-certificates,crypto-policie,pki,resolv.conf,ssl # private-tmp +memory-deny-write-execute -- cgit v1.2.3-54-g00ecf