github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

Initial adding of memory-deny-write-execute to profiles

Browse source 
- mdwe breaks most vm-based languages so python/java/javascript and some mono programs are not compatible
- mdwe also breaks most 3d accelerated programs such as 3d games
- mdwe is similar to PaX's mprotect meaning PaX flag managers can be used as reference
-- See https://github.com/copperhead/paxd-archive/blob/master/paxd.conf
-- See https://github.com/nning/linux-pax-flags
This commit is contained in:
Tad 2017-07-30 16:56:31 -04:00
parent 0dba38435e
commit b18f42ab02
16 changed files with 20 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
etc/bleachbit.profile
View file

@ -28,5 +28,6 @@ shell none
# private-tmp
# private-etc
memory-deny-write-execute
noexec ${HOME}
noexec /tmp

1
etc/brasero.profile
View file

@ -30,5 +30,6 @@ tracelog
# private-etc fonts
# private-tmp
memory-deny-write-execute
noexec ${HOME}
noexec /tmp

2
etc/cvlc.profile
View file

@ -27,3 +27,5 @@ tracelog
#private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc
private-dev
private-tmp
memory-deny-write-execute

1
etc/eog.profile
View file

@ -33,5 +33,6 @@ private-dev
private-etc fonts
private-tmp
memory-deny-write-execute
noexec ${HOME}
noexec /tmp

1
etc/evince.profile
View file

@ -32,5 +32,6 @@ private-etc fonts
# evince needs access to /tmp/mozilla* to work in firefox
# private-tmp
memory-deny-write-execute
noexec ${HOME}
noexec /tmp

1
etc/file-roller.profile
View file

@ -29,5 +29,6 @@ tracelog
private-dev
# private-etc fonts
memory-deny-write-execute
noexec ${HOME}
noexec /tmp

1
etc/gnome-calculator.profile
View file

@ -37,5 +37,6 @@ private-dev
private-tmp
disable-mnt
memory-deny-write-execute
noexec ${HOME}
noexec /tmp

1
etc/keepassxc.profile
View file

@ -33,5 +33,6 @@ private-dev
private-etc fonts,ld.so.cache
private-tmp
memory-deny-write-execute
noexec ${HOME}
noexec /tmp

1
etc/less.profile
View file

@ -21,5 +21,6 @@ blacklist /tmp/.X11-unix
private-dev
memory-deny-write-execute
noexec ${HOME}
noexec /tmp

1
etc/mumble.profile
View file

@ -35,5 +35,6 @@ private-bin mumble
private-tmp
disable-mnt
memory-deny-write-execute
noexec ${HOME}
noexec /tmp

1
etc/peek.profile
View file

@ -28,5 +28,6 @@ shell none
private-dev
private-tmp
memory-deny-write-execute
noexec ${HOME}
noexec /tmp

1
etc/ssh.profile
View file

@ -31,5 +31,6 @@ tracelog
private-dev
#private-tmp #Breaks when exiting
memory-deny-write-execute
noexec ${HOME}
noexec /tmp

2
etc/strings.profile
View file

@ -18,3 +18,5 @@ shell none
tracelog
private-dev
blacklist /tmp/.X11-unix
memory-deny-write-execute

2
etc/transmission-cli.profile
View file

@ -28,3 +28,5 @@ tracelog
private-tmp
private-dev
private-etc none
memory-deny-write-execute

2
etc/transmission-gtk.profile
View file

@ -34,3 +34,5 @@ tracelog
private-bin transmission-gtk
private-dev
private-tmp
memory-deny-write-execute

1
etc/vlc.profile
View file

@ -27,5 +27,6 @@ private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc
private-dev
private-tmp
memory-deny-write-execute
noexec ${HOME}
noexec /tmp