diff options
author | 2016-12-15 12:58:32 +0100 | |
---|---|---|
committer | 2016-12-15 12:58:32 +0100 | |
commit | d8ee390a6ca56fde4baad57dea7572c39d595809 (patch) | |
tree | 255252b15232086e6f65203cda676859ab4117a0 /etc/abrowser.profile | |
parent | Update quiterss.profile (diff) | |
parent | added a 1 second delay after xpra server is started (diff) | |
download | firejail-d8ee390a6ca56fde4baad57dea7572c39d595809.tar.gz firejail-d8ee390a6ca56fde4baad57dea7572c39d595809.tar.zst firejail-d8ee390a6ca56fde4baad57dea7572c39d595809.zip |
Merge pull request #1 from netblue30/master
Bring fork up-to-date
Diffstat (limited to 'etc/abrowser.profile')
-rw-r--r-- | etc/abrowser.profile | 17 |
1 files changed, 7 insertions, 10 deletions
diff --git a/etc/abrowser.profile b/etc/abrowser.profile index 949635258..481301420 100644 --- a/etc/abrowser.profile +++ b/etc/abrowser.profile | |||
@@ -1,5 +1,4 @@ | |||
1 | # Firejail profile for Abrowser | 1 | # Firejail profile for Abrowser |
2 | |||
3 | noblacklist ~/.mozilla | 2 | noblacklist ~/.mozilla |
4 | noblacklist ~/.cache/mozilla | 3 | noblacklist ~/.cache/mozilla |
5 | include /etc/firejail/disable-common.inc | 4 | include /etc/firejail/disable-common.inc |
@@ -7,17 +6,16 @@ include /etc/firejail/disable-programs.inc | |||
7 | include /etc/firejail/disable-devel.inc | 6 | include /etc/firejail/disable-devel.inc |
8 | 7 | ||
9 | caps.drop all | 8 | caps.drop all |
10 | seccomp | ||
11 | protocol unix,inet,inet6,netlink | ||
12 | netfilter | 9 | netfilter |
13 | tracelog | 10 | nonewprivs |
14 | noroot | 11 | noroot |
12 | protocol unix,inet,inet6,netlink | ||
13 | seccomp | ||
14 | tracelog | ||
15 | 15 | ||
16 | whitelist ${DOWNLOADS} | 16 | whitelist ${DOWNLOADS} |
17 | mkdir ~/.mozilla | 17 | mkdir ~/.mozilla |
18 | whitelist ~/.mozilla | 18 | whitelist ~/.mozilla |
19 | mkdir ~/.cache | ||
20 | mkdir ~/.cache/mozilla | ||
21 | mkdir ~/.cache/mozilla/abrowser | 19 | mkdir ~/.cache/mozilla/abrowser |
22 | whitelist ~/.cache/mozilla/abrowser | 20 | whitelist ~/.cache/mozilla/abrowser |
23 | whitelist ~/dwhelper | 21 | whitelist ~/dwhelper |
@@ -40,13 +38,12 @@ whitelist ~/.config/lastpass | |||
40 | 38 | ||
41 | 39 | ||
42 | #silverlight | 40 | #silverlight |
43 | whitelist ~/.wine-pipelight | 41 | whitelist ~/.wine-pipelight |
44 | whitelist ~/.wine-pipelight64 | 42 | whitelist ~/.wine-pipelight64 |
45 | whitelist ~/.config/pipelight-widevine | 43 | whitelist ~/.config/pipelight-widevine |
46 | whitelist ~/.config/pipelight-silverlight5.1 | 44 | whitelist ~/.config/pipelight-silverlight5.1 |
47 | 45 | ||
48 | include /etc/firejail/whitelist-common.inc | 46 | include /etc/firejail/whitelist-common.inc |
49 | 47 | ||
50 | # experimental features | 48 | # experimental features |
51 | #private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse | 49 | #private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse |
52 | |||