diff options
| author |  netblue30 <netblue30@yahoo.com> | 2015-10-07 14:15:14 -0400 |
|---|---|---|
| committer | netblue30 <netblue30@yahoo.com> | 2015-10-07 14:15:14 -0400 |
| commit | e4d4b4841913013f51ae7f710b59e289c0455791 (patch) | |
| tree | d3fd6249d89f53cc9659b2756d109e6abbf79ff4 | |
| parent | adding --mtu option (diff) | |
| parent | Add a profile for Spotify (diff) | |
| download | firejail-e4d4b4841913013f51ae7f710b59e289c0455791.tar.gz firejail-e4d4b4841913013f51ae7f710b59e289c0455791.tar.zst firejail-e4d4b4841913013f51ae7f710b59e289c0455791.zip | |
Merge pull request #73 from greigdp/spotify-profile
Add a profile for Spotify
| -rw-r--r-- | etc/spotify.profile | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/etc/spotify.profile b/etc/spotify.profile new file mode 100644 index 000000000..3b2360a65 --- /dev/null +++ b/etc/spotify.profile | |||
| @@ -0,0 +1,19 @@ | |||
| 1 | # Spotify profile | ||
| 2 | include /etc/firejail/disable-mgmt.inc | ||
| 3 | include /etc/firejail/disable-secret.inc | ||
| 4 | include /etc/firejail/disable-common.inc | ||
| 5 | include /etc/firejail/disable-history.inc | ||
| 6 | |||
| 7 | # Whitelist the folders needed by Spotify - This is more restrictive | ||
| 8 | # than a blacklist though, but this is all spotify requires for | ||
| 9 | # streaming audio | ||
| 10 | whitelist ${HOME}/.config/spotify | ||
| 11 | whitelist ${HOME}/.local/share/spotify | ||
| 12 | whitelist ${HOME}/.cache/spotify | ||
| 13 | # Whitelist the pulseaudio config, to allow PulseAudio workaround (Issue #69) | ||
| 14 | whitelist ${HOME}/.config/pulse | ||
| 15 | |||
| 16 | caps.drop all | ||
| 17 | seccomp | ||
| 18 | netfilter | ||
| 19 | noroot | ||