netblue30 / firejail

Linux namespaces and seccomp-bpf sandbox
https://firejail.wordpress.com
GNU General Public License v2.0
5.83k stars 568 forks source link

profiles: hexchat: allow lua/downloads and harden #6331

Closed glitsj16 closed 6 months ago

glitsj16 commented 6 months ago

Allow more paths and add some extra options to harden the profile.

Also, rework the private-bin comment. We allow Perl but keep it out of private-bin. Do the same for Lua and clarify in the comment how to enable these interpreters.

Consulted resources: