github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

profile cleanup

Browse source
This commit is contained in:
netblue30 2016-09-28 10:29:01 -04:00
parent 79a014e0e6
commit 9498f2313e
10 changed files with 34 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

1
etc/dnscrypt-proxy.profile
View file

@ -9,5 +9,6 @@ include /etc/firejail/disable-passwdmgr.inc
private
private-dev
nosound
no3d
seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open

1
etc/dnsmasq.profile
View file

@ -12,5 +12,6 @@ nonewprivs
private
private-dev
nosound
no3d
protocol unix,inet,inet6,netlink
seccomp

6
etc/file.profile
View file

@ -7,7 +7,11 @@ tracelog
net none
shell none
private-bin file
private-dev
private-etc magic.mgc,magic,localtime
hostname file
private-dev
nosound
no3d
private-tmp
blacklist /tmp/.X11-unix

5
etc/gzip.profile
View file

@ -5,6 +5,9 @@ include /etc/firejail/default.profile
tracelog
net none
shell none
private-dev
private-tmp
blacklist /tmp/.X11-unix
private-dev
nosound
no3d

2
etc/server.profile
View file

@ -9,6 +9,8 @@ include /etc/firejail/disable-passwdmgr.inc
private
private-dev
nosound
no3d
private-tmp
blacklist /tmp/.X11-unix
seccomp

6
etc/tar.profile
View file

@ -10,6 +10,10 @@ shell none
# support compressed archives
private-bin sh,tar,gtar,compress,gzip,lzma,xz,bzip2,lbzip2,lzip,lzop
private-dev
nosound
no3d
private-etc passwd,group,localtime
hostname tar
nosound
private-tmp
blacklist /tmp/.X11-unix

6
etc/unrar.profile
View file

@ -8,6 +8,10 @@ net none
shell none
private-bin unrar
private-dev
nosound
no3d
private-etc passwd,group,localtime
hostname unrar
nosound
private-tmp
blacklist /tmp/.X11-unix

6
etc/unzip.profile
View file

@ -7,7 +7,11 @@ tracelog
net none
shell none
private-bin unzip
private-dev
private-etc passwd,group,localtime
hostname unzip
private-dev
nosound
no3d
private-tmp
blacklist /tmp/.X11-unix

2
etc/uudeview.profile
View file

@ -13,3 +13,5 @@ private-tmp
private-etc nonexisting_fakefile_for_empty_etc
hostname uudeview
nosound
uudeview

5
etc/xzdec.profile
View file

@ -5,6 +5,9 @@ include /etc/firejail/default.profile
tracelog
net none
shell none
private-dev
private-tmp
blacklist /tmp/.X11-unix
private-dev
nosound
no3d