github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

tightening unbound and dnscrypt-proxy profiles

Browse source
This commit is contained in:
netblue30 2016-01-23 10:23:23 -05:00
parent 9a6afbab3d
commit 9cb2ea2e6f
3 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
README
View file

@ -18,6 +18,8 @@ License: GPL v2
Firejail Authors:
netblue30 (netblue30@yahoo.com)
curiosity-seeker (https://github.com/curiosity-seeker)
- tightening unbound and dnscrypt-proxy profiles
sinkuu (https://github.com/sinkuu)
- blacklisting kwalletd
Bader Zaidan (https://github.com/BaderSZ)

4
etc/dnscrypt-proxy.profile
View file

@ -2,7 +2,9 @@
noblacklist /sbin
noblacklist /usr/sbin
include /etc/firejail/disable-mgmt.inc
private
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-secret.incprivate
private-dev
seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open

3
etc/unbound.profile
View file

@ -2,6 +2,9 @@
noblacklist /sbin
noblacklist /usr/sbin
include /etc/firejail/disable-mgmt.inc
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-secret.incprivate
private
private-dev
seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open