diff --git a/etc/profile-a-l/clamtk.profile b/etc/profile-a-l/clamtk.profile index 9fc73ee5509..7651c5d32d9 100644 --- a/etc/profile-a-l/clamtk.profile +++ b/etc/profile-a-l/clamtk.profile @@ -1,4 +1,5 @@ # Firejail profile for clamtk +# Description: Easy to use, light-weight, on-demand virus scanner for Linux systems # This file is overwritten after every install/update # Persistent local customizations include clamtk.local @@ -7,15 +8,22 @@ include globals.local include disable-exec.inc +# Add the below lines to your clamtk.local if you update signatures databases per-user: +#ignore net none +#netfilter +#protocol inet,inet6 + caps.drop all ipc-namespace net none no3d nodvd -nogroups +# nogroups breaks scanning +#nogroups noinput nonewprivs -noroot +# noroot breaks scanning +#noroot nosound notv nou2f @@ -25,7 +33,9 @@ seccomp private-dev -dbus-user none +dbus-user filter +dbus-user.talk ca.desrt.dconf +dbus-user.talk org.gtk.vfs.UDisks2VolumeMonitor dbus-system none restrict-namespaces