summaryrefslogtreecommitdiffstats
path: root/etc/bleachbit.profile
diff options
context:
space:
mode:
authorLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
committerLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
commit9e3ba319be6b9546d7e8f450ca419ee2f3f4040b (patch)
tree0aebe82de78a61877c267f4dcb2ebcc13a2e37c9 /etc/bleachbit.profile
parentvarious profile fixes (#1433) (diff)
downloadfirejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.gz
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.zst
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.zip
Unify all profiles
Diffstat (limited to 'etc/bleachbit.profile')
-rw-r--r--etc/bleachbit.profile15
1 files changed, 7 insertions, 8 deletions
diff --git a/etc/bleachbit.profile b/etc/bleachbit.profile
index f2553cd9c..dab328163 100644
--- a/etc/bleachbit.profile
+++ b/etc/bleachbit.profile
@@ -1,18 +1,17 @@
1# Persistent global definitions go here 1# Firejail profile for bleachbit
2# This file is overwritten after every install/update
3# Persistent local customizations
4include /etc/firejail/bleachbit.local
5# Persistent global definitions
2include /etc/firejail/globals.local 6include /etc/firejail/globals.local
3 7
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/bleachbit.local
7 8
8# bleachbit profile
9include /etc/firejail/disable-common.inc 9include /etc/firejail/disable-common.inc
10# include /etc/firejail/disable-programs.inc
11include /etc/firejail/disable-devel.inc 10include /etc/firejail/disable-devel.inc
12include /etc/firejail/disable-passwdmgr.inc 11include /etc/firejail/disable-passwdmgr.inc
12# include /etc/firejail/disable-programs.inc
13 13
14caps.drop all 14caps.drop all
15#ipc-namespace
16net none 15net none
17no3d 16no3d
18nogroups 17nogroups
@@ -26,8 +25,8 @@ shell none
26 25
27# private-bin 26# private-bin
28# private-dev 27# private-dev
29# private-tmp
30# private-etc 28# private-etc
29# private-tmp
31 30
32memory-deny-write-execute 31memory-deny-write-execute
33noexec ${HOME} 32noexec ${HOME}