mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-21 06:45:29 -06:00
harden mpg123.profile (#3438)
* harden mpg123.profile * drop nodvd from mpg123.profile
This commit is contained in:
parent
b67e9a9f5c
commit
3d7a75b5e7
1 changed files with 7 additions and 3 deletions
|
|
@ -1,13 +1,13 @@
|
|||
# Firejail profile for mpg123
|
||||
# Description: MPEG audio player/decoder
|
||||
# This file is overwritten after every install/update
|
||||
quiet
|
||||
# Persistent local customizations
|
||||
include mpg123.local
|
||||
# Persistent global definitions
|
||||
include globals.local
|
||||
|
||||
noblacklist ${MUSIC}
|
||||
noblacklist ${VIDEOS}
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
|
|
@ -23,19 +23,23 @@ include whitelist-var-common.inc
|
|||
apparmor
|
||||
caps.drop all
|
||||
netfilter
|
||||
no3d
|
||||
nogroups
|
||||
nonewprivs
|
||||
noroot
|
||||
notv
|
||||
nou2f
|
||||
novideo
|
||||
protocol unix,inet,inet6,netlink
|
||||
seccomp
|
||||
shell none
|
||||
tracelog
|
||||
|
||||
#private-bin mpg123*
|
||||
private-dev
|
||||
private-tmp
|
||||
|
||||
memory-deny-write-execute
|
||||
|
||||
dbus-user none
|
||||
dbus-system none
|
||||
|
||||
memory-deny-write-execute
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue