Merge pull request #275 from kalegrill/mupen64plus

add mupen64plus profile

2 files changed, 13 insertions, 0 deletions

diff --git a/Makefile.in b/Makefile.in
index 591e53cf0..1ed3e4df1 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -135,6 +135,7 @@ realinstall:
         install -c -m 0644 .etc/mathematica.profile $(DESTDIR)/$(sysconfdir)/firejail/.
         install -c -m 0644 .etc/Mathematica.profile $(DESTDIR)/$(sysconfdir)/firejail/.
         install -c -m 0644 .etc/uget-gtk.profile $(DESTDIR)/$(sysconfdir)/firejail/.
+        install -c -m 0644 .etc/mupen64plus.profile $(DESTDIR)/$(sysconfdir)/firejail/.
         bash -c "if [ ! -f $(DESTDIR)/$(sysconfdir)/firejail/login.users ]; then install -c -m 0644 etc/login.users $(DESTDIR)/$(sysconfdir)/firejail/.; fi;"
         rm -fr .etc
         # man pages
diff --git a/etc/mupen64plus.profile b/etc/mupen64plus.profile
new file mode 100644
index 000000000..f21c35609
--- /dev/null
+++ b/etc/mupen64plus.profile
@@ -0,0 +1,12 @@
+# mupen64plus profile
+# manually whitelist ROM files
+include /etc/firejail/disable-mgmt.inc
+include /etc/firejail/disable-secret.inc
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-devel.inc
+whitelist ${HOME}/.local/share/mupen64plus/
+whitelist ${HOME}/.config/mupen64plus/
+noroot
+caps.drop all
+seccomp
+net none