diff options
author | 2018-01-26 12:02:34 -0400 | |
---|---|---|
committer | 2018-01-26 12:02:34 -0400 | |
commit | 7c3548a095fb4e911d77a94c40bdefd3a571e680 (patch) | |
tree | 3ecbb56b89198a484f0146ba10b558c7dfd92fd8 | |
parent | Add a profile for Red Eclipse (diff) | |
download | firejail-7c3548a095fb4e911d77a94c40bdefd3a571e680.tar.gz firejail-7c3548a095fb4e911d77a94c40bdefd3a571e680.tar.zst firejail-7c3548a095fb4e911d77a94c40bdefd3a571e680.zip |
canary
-rw-r--r-- | etc/enox.profile | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/etc/enox.profile b/etc/enox.profile new file mode 100644 index 000000000..cc5403719 --- /dev/null +++ b/etc/enox.profile | |||
@@ -0,0 +1,36 @@ | |||
1 | # Firejail profile for dnox | ||
2 | # This file is overwritten after every install/update | ||
3 | # Persistent local customizations | ||
4 | include /etc/firejail/enox.local | ||
5 | # Persistent global definitions | ||
6 | include /etc/firejail/globals.local | ||
7 | |||
8 | noblacklist ${HOME}/.cache/Enox | ||
9 | noblacklist ${HOME}/.config/Enox | ||
10 | noblacklist ${HOME}/.pki | ||
11 | |||
12 | include /etc/firejail/disable-common.inc | ||
13 | include /etc/firejail/disable-programs.inc | ||
14 | |||
15 | mkdir ${HOME}/.cache/dnox | ||
16 | mkdir ${HOME}/.config/dnox | ||
17 | mkdir ${HOME}/.pki | ||
18 | whitelist ${DOWNLOADS} | ||
19 | whitelist ${HOME}/.cache/Enox | ||
20 | whitelist ${HOME}/.config/Enox | ||
21 | whitelist ${HOME}/.pki | ||
22 | include /etc/firejail/whitelist-common.inc | ||
23 | include /etc/firejail/whitelist-var-common.inc | ||
24 | |||
25 | caps.keep sys_chroot,sys_admin | ||
26 | netfilter | ||
27 | nodvd | ||
28 | nogroups | ||
29 | notv | ||
30 | shell none | ||
31 | |||
32 | private-dev | ||
33 | # private-tmp - problems with multiple browser sessions | ||
34 | |||
35 | noexec ${HOME} | ||
36 | noexec /tmp | ||