firejail/etc/less.profile
Tad b18f42ab02 Initial adding of memory-deny-write-execute to profiles
- mdwe breaks most vm-based languages so python/java/javascript and some mono programs are not compatible
- mdwe also breaks most 3d accelerated programs such as 3d games
- mdwe is similar to PaX's mprotect meaning PaX flag managers can be used as reference
-- See https://github.com/copperhead/paxd-archive/blob/master/paxd.conf
-- See https://github.com/nning/linux-pax-flags
2017-08-02 00:13:42 -04:00

26 lines
436 B
Text

quiet
# Persistent global definitions go here
include /etc/firejail/globals.local
# This file is overwritten during software install.
# Persistent customizations should go in a .local file.
include /etc/firejail/less.local
# less profile
ignore noroot
include /etc/firejail/default.profile
net none
no3d
nosound
novideo
shell none
tracelog
blacklist /tmp/.X11-unix
private-dev
memory-deny-write-execute
noexec ${HOME}
noexec /tmp