mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
cleanup
cin profile: 'protocol unix' implies nonewprivs
This commit is contained in:
parent
1c187f7901
commit
ce2b96e2e3
3 changed files with 5 additions and 5 deletions
|
|
@ -19,7 +19,7 @@ net none
|
|||
nodbus
|
||||
nodvd
|
||||
#nogroups
|
||||
#nonewprivs
|
||||
nonewprivs
|
||||
notv
|
||||
noroot
|
||||
protocol unix
|
||||
|
|
|
|||
|
|
@ -18,7 +18,7 @@ noblacklist /opt/natron
|
|||
|
||||
include /etc/firejail/disable-common.inc
|
||||
include /etc/firejail/disable-devel.inc
|
||||
#include /etc/firejail/disable-interpreters.inc
|
||||
include /etc/firejail/disable-interpreters.inc
|
||||
include /etc/firejail/disable-passwdmgr.inc
|
||||
include /etc/firejail/disable-programs.inc
|
||||
|
||||
|
|
|
|||
|
|
@ -20,8 +20,8 @@ include /etc/firejail/whitelist-var-common.inc
|
|||
#apparmor - on Ubuntu 18.04 it refuses to start without dbus access
|
||||
caps.drop all
|
||||
netfilter
|
||||
# nodbus - problems with KDE
|
||||
# nogroups
|
||||
#nodbus
|
||||
#nogroups
|
||||
nonewprivs
|
||||
noroot
|
||||
protocol unix,inet,inet6,netlink
|
||||
|
|
@ -33,6 +33,6 @@ private-dev
|
|||
private-tmp
|
||||
|
||||
# mdwe is disabled due to breaking hardware accelerated decoding
|
||||
# memory-deny-write-execute
|
||||
#memory-deny-write-execute
|
||||
noexec ${HOME}
|
||||
noexec /tmp
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue