private-bin conversion

1 files changed, 10 insertions, 9 deletions

diff --git a/etc/aweather.profile b/etc/aweather.profile
index dd508e736..d617fb701 100644
--- a/etc/aweather.profile
+++ b/etc/aweather.profile
@@ -1,24 +1,25 @@
 # Firejail profile for aweather.
-
-# Noblacklist
 noblacklist ~/.config/aweather
-
-# Include
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
 
-# Call these options
+# Whitelist
+mkdir ~/.config
+mkdir ~/.config/aweather
+whitelist ~/.config/aweather
+
 caps.drop all
 netfilter
 nonewprivs
+nogroups
 noroot
+nosound
 protocol unix,inet,inet6,netlink
 seccomp
+shell none
 tracelog
 
-# Whitelist
-mkdir ~/.config
-mkdir ~/.config/aweather
-whitelist ~/.config/aweather
+private-bin aweather
+private-dev