mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-21 06:45:29 -06:00
Harden enchant.profile (#2455)
This commit is contained in:
parent
549427d4af
commit
17b7a99c68
1 changed files with 7 additions and 3 deletions
|
|
@ -15,8 +15,11 @@ include disable-passwdmgr.inc
|
|||
include disable-programs.inc
|
||||
include disable-xdg.inc
|
||||
|
||||
apparmor
|
||||
caps.drop all
|
||||
netfilter
|
||||
ipc-namespace
|
||||
machine-id
|
||||
net none
|
||||
no3d
|
||||
nodbus
|
||||
nodvd
|
||||
|
|
@ -32,12 +35,13 @@ seccomp
|
|||
shell none
|
||||
tracelog
|
||||
|
||||
# private-bin enchant, enchant-*
|
||||
private-bin enchant, enchant-*
|
||||
private-cache
|
||||
private-dev
|
||||
private-etc alternatives
|
||||
private-lib
|
||||
private-tmp
|
||||
|
||||
# memory-deny-write-execute
|
||||
memory-deny-write-execute
|
||||
noexec ${HOME}
|
||||
noexec /tmp
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue