Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

harden mpg123.profile #3438

Merged
merged 2 commits into from
May 27, 2020
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 7 additions & 3 deletions etc/profile-m-z/mpg123.profile
Original file line number Diff line number Diff line change
@@ -1,13 +1,13 @@
# Firejail profile for mpg123
# Description: MPEG audio player/decoder
# This file is overwritten after every install/update
quiet
# Persistent local customizations
include mpg123.local
# Persistent global definitions
include globals.local

noblacklist ${MUSIC}
noblacklist ${VIDEOS}

include disable-common.inc
include disable-devel.inc
Expand All @@ -23,19 +23,23 @@ include whitelist-var-common.inc
apparmor
caps.drop all
netfilter
no3d
nogroups
nonewprivs
noroot
notv
nou2f
novideo
protocol unix,inet,inet6,netlink
seccomp
shell none
tracelog

#private-bin mpg123*
private-dev
private-tmp

memory-deny-write-execute

dbus-user none
dbus-system none

memory-deny-write-execute