From 4fbd6962ab60be2e281577a1f43c00430e9f46ce Mon Sep 17 00:00:00 2001 From: valoq Date: Thu, 9 Mar 2017 22:33:33 +0100 Subject: [PATCH] minor fix --- profiles/debian/evince | 6 +++++- profiles/debian/libreoffice | 6 +++++- profiles/evince | 6 +++++- 3 files changed, 15 insertions(+), 3 deletions(-) diff --git a/profiles/debian/evince b/profiles/debian/evince index 95aa445..d78ef9c 100644 --- a/profiles/debian/evince +++ b/profiles/debian/evince @@ -35,7 +35,11 @@ set -euo pipefail --unsetenv XDG_RUNTIME_DIR \ --unsetenv DBUS_SESSION_BUS_ADDRESS \ --setenv SHELL /bin/false \ - --unshare-all \ + --unshare-user-try \ + --unshare-pid \ + --unshare-net \ + --unshare-uts \ + --unshare-cgroup \ --new-session \ --seccomp 10 \ 10< /usr/local/bin/seccomp_default_filter.bpf \ diff --git a/profiles/debian/libreoffice b/profiles/debian/libreoffice index 7242015..67ac7f8 100644 --- a/profiles/debian/libreoffice +++ b/profiles/debian/libreoffice @@ -36,7 +36,11 @@ set -euo pipefail --bind ~/.config/libreoffice ~/.config/libreoffice \ --unsetenv MOZ_PLUGIN_PATH \ --unsetenv XDG_RUNTIME_DIR \ - --unshare-all \ + --unshare-user-try \ + --unshare-pid \ + --unshare-net \ + --unshare-uts \ + --unshare-cgroup \ --new-session \ --seccomp 10 \ 10< /usr/local/bin/seccomp_default_filter.bpf \ diff --git a/profiles/evince b/profiles/evince index 797567c..09d7731 100644 --- a/profiles/evince +++ b/profiles/evince @@ -41,7 +41,11 @@ set -euo pipefail --unsetenv XDG_RUNTIME_DIR \ --unsetenv MAIL \ --setenv SHELL /bin/false \ - --unshare-all \ + --unshare-user-try \ + --unshare-pid \ + --unshare-net \ + --unshare-uts \ + --unshare-cgroup \ --new-session \ --seccomp 10 \ 10< /usr/local/bin/seccomp_default_filter.bpf \