github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

unbound: fixes, blacklist all of ${RUNUSER}

Browse source
This commit is contained in:
smitsohu 2022-04-10 17:48:29 +02:00
parent 024e62f31d
commit af2b81b612
1 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
etc/profile-m-z/unbound.profile
View file

@ -10,7 +10,7 @@ noblacklist /sbin
noblacklist /usr/sbin
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
blacklist ${RUNUSER}
include disable-common.inc
include disable-devel.inc
@ -19,8 +19,11 @@ include disable-interpreters.inc
include disable-programs.inc
include disable-xdg.inc
whitelist /usr/share/dns
include whitelist-usr-share-common.inc
whitelist /var/lib/ca-certificates
read-only /var/lib/ca-certificates
whitelist /var/lib/unbound
whitelist /var/run
@ -48,5 +51,4 @@ writable-var
dbus-user none
dbus-system none
# mdwe can break modules/plugins
memory-deny-write-execute