aboutsummaryrefslogtreecommitdiffstats
path: root/etc/chromium.profile
diff options
context:
space:
mode:
authorLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
committerLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
commit9e3ba319be6b9546d7e8f450ca419ee2f3f4040b (patch)
tree0aebe82de78a61877c267f4dcb2ebcc13a2e37c9 /etc/chromium.profile
parentvarious profile fixes (#1433) (diff)
downloadfirejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.gz
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.zst
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.zip
Unify all profiles
Diffstat (limited to 'etc/chromium.profile')
-rw-r--r--etc/chromium.profile40
1 files changed, 20 insertions, 20 deletions
diff --git a/etc/chromium.profile b/etc/chromium.profile
index 8266770d7..97149d4d4 100644
--- a/etc/chromium.profile
+++ b/etc/chromium.profile
@@ -1,41 +1,41 @@
1# Persistent global definitions go here 1# Firejail profile for chromium
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/chromium.local 4include /etc/firejail/chromium.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7 7
8# Chromium browser profile
9noblacklist ~/.config/chromium
10noblacklist ~/.cache/chromium 8noblacklist ~/.cache/chromium
11noblacklist ~/.pki 9noblacklist ~/.config/chromium
12# specific to Arch
13noblacklist ~/.config/chromium-flags.conf 10noblacklist ~/.config/chromium-flags.conf
11noblacklist ~/.pki
12
14include /etc/firejail/disable-common.inc 13include /etc/firejail/disable-common.inc
15include /etc/firejail/disable-programs.inc
16# chromium is distributed with a perl script on Arch
17# include /etc/firejail/disable-devel.inc 14# include /etc/firejail/disable-devel.inc
15include /etc/firejail/disable-programs.inc
18 16
19whitelist ${DOWNLOADS}
20mkdir ~/.config/chromium
21whitelist ~/.config/chromium
22mkdir ~/.cache/chromium 17mkdir ~/.cache/chromium
23whitelist ~/.cache/chromium 18mkdir ~/.config/chromium
24mkdir ~/.pki 19mkdir ~/.pki
25whitelist ~/.pki 20whitelist ${DOWNLOADS}
21whitelist ~/.cache/chromium
22whitelist ~/.config/chromium
26whitelist ~/.config/chromium-flags.conf 23whitelist ~/.config/chromium-flags.conf
27 24whitelist ~/.pki
28include /etc/firejail/whitelist-common.inc 25include /etc/firejail/whitelist-common.inc
29 26
30caps.keep sys_chroot,sys_admin 27caps.keep sys_chroot,sys_admin
31#ipc-namespace
32netfilter 28netfilter
33nogroups 29nogroups
34shell none 30shell none
35 31
36private-dev 32private-dev
37#private-tmp - problems with multiple browser sessions 33# private-tmp - problems with multiple browser sessions
38#disable-mnt
39 34
40noexec ${HOME} 35noexec ${HOME}
41noexec /tmp 36noexec /tmp
37
38# CLOBBERED COMMENTS
39# chromium is distributed with a perl script on Arch
40# disable-mnt
41# specific to Arch