aboutsummaryrefslogtreecommitdiffstats
path: root/etc/cvlc.profile
diff options
context:
space:
mode:
authorLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
committerLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
commit9e3ba319be6b9546d7e8f450ca419ee2f3f4040b (patch)
tree0aebe82de78a61877c267f4dcb2ebcc13a2e37c9 /etc/cvlc.profile
parentvarious profile fixes (#1433) (diff)
downloadfirejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.gz
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.zst
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.zip
Unify all profiles
Diffstat (limited to 'etc/cvlc.profile')
-rw-r--r--etc/cvlc.profile19
1 files changed, 10 insertions, 9 deletions
diff --git a/etc/cvlc.profile b/etc/cvlc.profile
index 921d505a9..0b63151a8 100644
--- a/etc/cvlc.profile
+++ b/etc/cvlc.profile
@@ -1,17 +1,16 @@
1# Persistent global definitions go here 1# Firejail profile for cvlc
2# This file is overwritten after every install/update
3# Persistent local customizations
4include /etc/firejail/cvlc.local
5# Persistent global definitions
2include /etc/firejail/globals.local 6include /etc/firejail/globals.local
3 7
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/vlc.local
7
8# Firejail profile for CVLC
9noblacklist ${HOME}/.config/vlc 8noblacklist ${HOME}/.config/vlc
10 9
11include /etc/firejail/disable-common.inc 10include /etc/firejail/disable-common.inc
12include /etc/firejail/disable-programs.inc
13include /etc/firejail/disable-devel.inc 11include /etc/firejail/disable-devel.inc
14include /etc/firejail/disable-passwdmgr.inc 12include /etc/firejail/disable-passwdmgr.inc
13include /etc/firejail/disable-programs.inc
15 14
16caps.drop all 15caps.drop all
17netfilter 16netfilter
@@ -23,9 +22,11 @@ seccomp
23shell none 22shell none
24tracelog 23tracelog
25 24
26# clvc doesn't like private-bin 25# private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc
27#private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc
28private-dev 26private-dev
29private-tmp 27private-tmp
30 28
31memory-deny-write-execute 29memory-deny-write-execute
30
31# CLOBBERED COMMENTS
32# clvc doesn't like private-bin