diff options
author | smitsohu <smitsohu@gmail.com> | 2018-04-04 14:31:28 +0200 |
---|---|---|
committer | smitsohu <smitsohu@gmail.com> | 2018-04-04 14:31:28 +0200 |
commit | 5b841b615dcec9bd93168f3061be68dbdb35e708 (patch) | |
tree | 4794d7641149dbf40fbc6d49be5ca83b4f2c6cff /etc/basilisk.profile | |
parent | deprecated --git-install and --git-uninstall (diff) | |
download | firejail-5b841b615dcec9bd93168f3061be68dbdb35e708.tar.gz firejail-5b841b615dcec9bd93168f3061be68dbdb35e708.tar.zst firejail-5b841b615dcec9bd93168f3061be68dbdb35e708.zip |
fix a0502dc5144185b6d346e92944e3359a833d2378, various enhancements
Diffstat (limited to 'etc/basilisk.profile')
-rw-r--r-- | etc/basilisk.profile | 50 |
1 files changed, 6 insertions, 44 deletions
diff --git a/etc/basilisk.profile b/etc/basilisk.profile index c13be364b..ac7f30c04 100644 --- a/etc/basilisk.profile +++ b/etc/basilisk.profile | |||
@@ -8,54 +8,16 @@ include /etc/firejail/globals.local | |||
8 | noblacklist ${HOME}/.cache/moonchild productions/basilisk | 8 | noblacklist ${HOME}/.cache/moonchild productions/basilisk |
9 | noblacklist ${HOME}/.moonchild productions/basilisk | 9 | noblacklist ${HOME}/.moonchild productions/basilisk |
10 | 10 | ||
11 | include /etc/firejail/disable-common.inc | ||
12 | include /etc/firejail/disable-devel.inc | ||
13 | include /etc/firejail/disable-interpreters.inc | ||
14 | include /etc/firejail/disable-programs.inc | ||
15 | |||
16 | # These are uncommented in the Firefox profile. If you run into trouble you may | ||
17 | # want to uncomment (some of) them. | ||
18 | #whitelist ${HOME}/dwhelper | ||
19 | #whitelist ${HOME}/.zotero | ||
20 | #whitelist ${HOME}/.vimperatorrc | ||
21 | #whitelist ${HOME}/.vimperator | ||
22 | #whitelist ${HOME}/.pentadactylrc | ||
23 | #whitelist ${HOME}/.pentadactyl | ||
24 | #whitelist ${HOME}/.keysnail.js | ||
25 | #whitelist ${HOME}/.config/gnome-mplayer | ||
26 | #whitelist ${HOME}/.cache/gnome-mplayer/plugin | ||
27 | #whitelist ${HOME}/.pki | ||
28 | #whitelist ${HOME}/.lastpass | ||
29 | |||
30 | # For silverlight | ||
31 | #whitelist ${HOME}/.wine-pipelight | ||
32 | #whitelist ${HOME}/.wine-pipelight64 | ||
33 | #whitelist ${HOME}/.config/pipelight-widevine | ||
34 | #whitelist ${HOME}/.config/pipelight-silverlight5.1 | ||
35 | |||
36 | mkdir ${HOME}/.cache/moonchild productions/basilisk | 11 | mkdir ${HOME}/.cache/moonchild productions/basilisk |
37 | mkdir ${HOME}/.moonchild productions | 12 | mkdir ${HOME}/.moonchild productions |
38 | whitelist ${DOWNLOADS} | 13 | whitelist ${DOWNLOADS} |
39 | whitelist ${HOME}/.cache/moonchild productions/basilisk | 14 | whitelist ${HOME}/.cache/moonchild productions/basilisk |
40 | whitelist ${HOME}/.moonchild productions | 15 | whitelist ${HOME}/.moonchild productions |
41 | include /etc/firejail/whitelist-common.inc | ||
42 | |||
43 | caps.drop all | ||
44 | netfilter | ||
45 | nodvd | ||
46 | nogroups | ||
47 | nonewprivs | ||
48 | noroot | ||
49 | notv | ||
50 | protocol unix,inet,inet6,netlink | ||
51 | seccomp | ||
52 | shell none | ||
53 | tracelog | ||
54 | 16 | ||
55 | # private-bin basilisk | 17 | #private-bin basilisk |
56 | # private-dev (disabled for now as it will interfere with webcam use in basilisk) | 18 | # private-etc must first be enabled in firefox-common.profile |
57 | # private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse | 19 | #private-etc basilisk |
58 | # private-opt basilisk | 20 | #private-opt basilisk |
59 | private-tmp | ||
60 | 21 | ||
61 | disable-mnt | 22 | # Redirect |
23 | include /etc/firejail/firefox-common.profile | ||