mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-21 06:45:29 -06:00
Harden gucharmap.profile (#2463)
This commit is contained in:
parent
f932d06ac8
commit
e80b999349
1 changed files with 8 additions and 1 deletions
|
|
@ -14,8 +14,10 @@ include disable-passwdmgr.inc
|
|||
include disable-programs.inc
|
||||
include disable-xdg.inc
|
||||
|
||||
apparmor
|
||||
caps.drop all
|
||||
netfilter
|
||||
machine-id
|
||||
net none
|
||||
no3d
|
||||
nodvd
|
||||
nogroups
|
||||
|
|
@ -30,10 +32,15 @@ seccomp
|
|||
shell none
|
||||
|
||||
disable-mnt
|
||||
# for GTK theme support comment 'private'
|
||||
private
|
||||
private-cache
|
||||
private-dev
|
||||
private-tmp
|
||||
|
||||
memory-deny-write-execute
|
||||
noexec ${HOME}
|
||||
noexec /tmp
|
||||
|
||||
# gucharmap will never write anything
|
||||
read-only ${HOME}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue