path: root/etc/profile-a-l/chromium-common-hardened.inc.profile

# This file is overwritten during software install.
# Persistent customizations should go in a .local file.
include chromium-common-hardened.inc.local

caps.drop all
nonewprivs
noroot
protocol unix,inet,inet6,netlink
# kcmp is requeired for ozone-platform=wayland, see #3783.
seccomp !chroot,!kcmp