github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

Harden 50 profiles

Browse source 
Hardened many profiles using disable-mnt and novideo
Fixed gnome-font-viewer
This commit is contained in:
Tad 2017-07-04 10:51:43 -04:00
parent 822be0355f
commit 5354f20012
51 changed files with 149 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

29
etc/gnome-font-viewer.profile
View file

@ -5,25 +5,26 @@ include /etc/firejail/globals.local
# Persistent customizations should go in a .local file.
include /etc/firejail/gnome-font-viewer.local
private
#include /etc/firejail/disable-common.inc
#include /etc/firejail/disable-programs.inc
#include /etc/firejail/disable-passwdmgr.inc
#Blacklist Paths
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-programs.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-devel.inc
#Options
caps.drop all
netfilter
no3d
nonewprivs
noroot
nosound
novideo
protocol unix,inet,inet6
seccomp
#
# depending on your usage, you can enable some of the commands below:
#
nogroups
shell none
# private-bin program
# private-etc none
# private-dev
# private-tmp
nosound
private-dev
private-tmp
disable-mnt
noexec ${HOME}
noexec /tmp