aboutsummaryrefslogtreecommitdiffstats
path: root/etc/file.profile
diff options
context:
space:
mode:
authorLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
committerLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
commit9e3ba319be6b9546d7e8f450ca419ee2f3f4040b (patch)
tree0aebe82de78a61877c267f4dcb2ebcc13a2e37c9 /etc/file.profile
parentvarious profile fixes (#1433) (diff)
downloadfirejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.gz
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.zst
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.zip
Unify all profiles
Diffstat (limited to 'etc/file.profile')
-rw-r--r--etc/file.profile21
1 files changed, 11 insertions, 10 deletions
diff --git a/etc/file.profile b/etc/file.profile
index 51e35007f..6e8280c3b 100644
--- a/etc/file.profile
+++ b/etc/file.profile
@@ -1,15 +1,16 @@
1# Firejail profile for file
2# This file is overwritten after every install/update
1quiet 3quiet
2# Persistent global definitions go here 4# Persistent local customizations
5include /etc/firejail/file.local
6# Persistent global definitions
3include /etc/firejail/globals.local 7include /etc/firejail/globals.local
4 8
5# This file is overwritten during software install. 9blacklist /tmp/.X11-unix
6# Persistent customizations should go in a .local file.
7include /etc/firejail/file.local
8 10
9# file profile
10include /etc/firejail/disable-common.inc 11include /etc/firejail/disable-common.inc
11include /etc/firejail/disable-programs.inc
12include /etc/firejail/disable-passwdmgr.inc 12include /etc/firejail/disable-passwdmgr.inc
13include /etc/firejail/disable-programs.inc
13 14
14caps.drop all 15caps.drop all
15hostname file 16hostname file
@@ -17,7 +18,6 @@ net none
17no3d 18no3d
18nogroups 19nogroups
19nonewprivs 20nonewprivs
20#noroot
21nosound 21nosound
22protocol unix 22protocol unix
23seccomp 23seccomp
@@ -25,8 +25,9 @@ shell none
25tracelog 25tracelog
26x11 none 26x11 none
27 27
28blacklist /tmp/.X11-unix
29
30private-dev
31private-bin file 28private-bin file
29private-dev
32private-etc magic.mgc,magic,localtime 30private-etc magic.mgc,magic,localtime
31
32# CLOBBERED COMMENTS
33# noroot