cin profile: 'protocol unix' implies nonewprivs
This commit is contained in:
smitsohu 2018-05-01 21:23:35 +02:00
parent 1c187f7901
commit ce2b96e2e3
3 changed files with 5 additions and 5 deletions

View file

@ -19,7 +19,7 @@ net none
nodbus
nodvd
#nogroups
#nonewprivs
nonewprivs
notv
noroot
protocol unix

View file

@ -18,7 +18,7 @@ noblacklist /opt/natron
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
#include /etc/firejail/disable-interpreters.inc
include /etc/firejail/disable-interpreters.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

View file

@ -20,8 +20,8 @@ include /etc/firejail/whitelist-var-common.inc
#apparmor - on Ubuntu 18.04 it refuses to start without dbus access
caps.drop all
netfilter
# nodbus - problems with KDE
# nogroups
#nodbus
#nogroups
nonewprivs
noroot
protocol unix,inet,inet6,netlink
@ -33,6 +33,6 @@ private-dev
private-tmp
# mdwe is disabled due to breaking hardware accelerated decoding
# memory-deny-write-execute
#memory-deny-write-execute
noexec ${HOME}
noexec /tmp