Harden 7z.profile

netblue30 · Aug 13, 2019 · 61e1bb4 · 61e1bb4
1 parent e5db487
commit 61e1bb4
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/etc/7z.profile b/etc/7z.profile
@@ -13,7 +13,9 @@ include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
 
+apparmor
 caps.drop all
+hostname 7z
 ipc-namespace
 machine-id
 net none
@@ -33,4 +35,8 @@ shell none
 tracelog
 x11 none
 
+#private-bin 7z,7z*,p7zip
+private-cache
 private-dev
+
+memory-deny-write-execute