diff options
author | 2015-10-07 14:15:14 -0400 | |
---|---|---|
committer | 2015-10-07 14:15:14 -0400 | |
commit | e4d4b4841913013f51ae7f710b59e289c0455791 (patch) | |
tree | d3fd6249d89f53cc9659b2756d109e6abbf79ff4 | |
parent | adding --mtu option (diff) | |
parent | Add a profile for Spotify (diff) | |
download | firejail-e4d4b4841913013f51ae7f710b59e289c0455791.tar.gz firejail-e4d4b4841913013f51ae7f710b59e289c0455791.tar.zst firejail-e4d4b4841913013f51ae7f710b59e289c0455791.zip |
Merge pull request #73 from greigdp/spotify-profile
Add a profile for Spotify
-rw-r--r-- | etc/spotify.profile | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/etc/spotify.profile b/etc/spotify.profile new file mode 100644 index 000000000..3b2360a65 --- /dev/null +++ b/etc/spotify.profile | |||
@@ -0,0 +1,19 @@ | |||
1 | # Spotify profile | ||
2 | include /etc/firejail/disable-mgmt.inc | ||
3 | include /etc/firejail/disable-secret.inc | ||
4 | include /etc/firejail/disable-common.inc | ||
5 | include /etc/firejail/disable-history.inc | ||
6 | |||
7 | # Whitelist the folders needed by Spotify - This is more restrictive | ||
8 | # than a blacklist though, but this is all spotify requires for | ||
9 | # streaming audio | ||
10 | whitelist ${HOME}/.config/spotify | ||
11 | whitelist ${HOME}/.local/share/spotify | ||
12 | whitelist ${HOME}/.cache/spotify | ||
13 | # Whitelist the pulseaudio config, to allow PulseAudio workaround (Issue #69) | ||
14 | whitelist ${HOME}/.config/pulse | ||
15 | |||
16 | caps.drop all | ||
17 | seccomp | ||
18 | netfilter | ||
19 | noroot | ||