diff options
author | corecontingency <54042889+corecontingency@users.noreply.github.com> | 2020-01-13 01:13:37 -0700 |
---|---|---|
committer | glitsj16 <glitsj16@users.noreply.github.com> | 2020-01-13 08:13:37 +0000 |
commit | bf53cec5888cf953b25a6be1d1b82bb008644ad7 (patch) | |
tree | 3a774822f3064b5c934edd06233b4886de001b99 /etc/i2prouter.profile | |
parent | aria2c fixes (#3143) (diff) | |
download | firejail-bf53cec5888cf953b25a6be1d1b82bb008644ad7.tar.gz firejail-bf53cec5888cf953b25a6be1d1b82bb008644ad7.tar.zst firejail-bf53cec5888cf953b25a6be1d1b82bb008644ad7.zip |
update i2prouter profile, and remove from firecfg (#3123)
Diffstat (limited to 'etc/i2prouter.profile')
-rw-r--r-- | etc/i2prouter.profile | 18 |
1 files changed, 9 insertions, 9 deletions
diff --git a/etc/i2prouter.profile b/etc/i2prouter.profile index e46fb3317..d9e7f1c8f 100644 --- a/etc/i2prouter.profile +++ b/etc/i2prouter.profile | |||
@@ -6,19 +6,19 @@ include i2prouter.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | # Notice: default browser will not be able to automatically open, due to sandbox. | 9 | # Notice: default browser will most likely not be able to automatically open, due to sandbox. |
10 | # Auto-opening default browser can be disabled in the I2P router console. | 10 | # Auto-opening default browser can be disabled in the I2P router console. |
11 | # This profile will not currently work with any Arch User Repository i2p packages, | 11 | # This profile will not currently work with any Arch User Repository I2P packages, |
12 | # use the distro-independent official java installer instead | 12 | # use the distro-independent official I2P java installer instead |
13 | 13 | ||
14 | # Only needed if i2prouter binary is in home directory, java installer does this | 14 | # Only needed if i2prouter binary is in home directory, official I2P java installer does this |
15 | ignore noexec ${HOME} | 15 | ignore noexec ${HOME} |
16 | 16 | ||
17 | noblacklist ${HOME}/.config/i2p | 17 | noblacklist ${HOME}/.config/i2p |
18 | noblacklist ${HOME}/.i2p | 18 | noblacklist ${HOME}/.i2p |
19 | noblacklist ${HOME}/.local/share/i2p | 19 | noblacklist ${HOME}/.local/share/i2p |
20 | noblacklist ${HOME}/i2p | 20 | noblacklist ${HOME}/i2p |
21 | # Only needed if wrapper is placed in /usr/sbin/, ubuntu official ppa package does this | 21 | # Only needed if wrapper is placed in /usr/sbin/, ubuntu official I2P ppa package does this |
22 | noblacklist /usr/sbin | 22 | noblacklist /usr/sbin |
23 | 23 | ||
24 | # Allow java (blacklisted by disable-devel.inc) | 24 | # Allow java (blacklisted by disable-devel.inc) |
@@ -40,13 +40,13 @@ whitelist ${HOME}/.config/i2p | |||
40 | whitelist ${HOME}/.i2p | 40 | whitelist ${HOME}/.i2p |
41 | whitelist ${HOME}/.local/share/i2p | 41 | whitelist ${HOME}/.local/share/i2p |
42 | whitelist ${HOME}/i2p | 42 | whitelist ${HOME}/i2p |
43 | # Only needed if wrapper is placed in /usr/sbin/, ubuntu official ppa package does this | 43 | # Only needed if wrapper is placed in /usr/sbin/, ubuntu official I2P ppa package does this |
44 | whitelist /usr/sbin/wrapper* | 44 | whitelist /usr/sbin/wrapper* |
45 | 45 | ||
46 | include whitelist-common.inc | 46 | include whitelist-common.inc |
47 | 47 | ||
48 | # May break I2P if wrapper is placed in the home directory | 48 | # May break I2P if wrapper is placed in the home directory; official I2P java installer does this |
49 | # If using ubuntu official ppa, this should be fine to uncomment, as it puts wrapper in /usr/sbin/ | 49 | # If using ubuntu official I2P ppa, this should be fine to uncomment, as it puts wrapper in /usr/sbin/ |
50 | #apparmor | 50 | #apparmor |
51 | caps.drop all | 51 | caps.drop all |
52 | ipc-namespace | 52 | ipc-namespace |
@@ -67,5 +67,5 @@ shell none | |||
67 | disable-mnt | 67 | disable-mnt |
68 | private-cache | 68 | private-cache |
69 | private-dev | 69 | private-dev |
70 | private-etc alternatives,ca-certificates,crypto-policies,i2p,java-8-openjdk,pki,ssl | 70 | private-etc alternatives,ca-certificates,crypto-policies,dconf,group,hostname,hosts,i2p,java-8-openjdk,java-9-openjdk,java-10-openjdk,java-11-openjdk,java-12-openjdk,java-13-openjdk,java-openjdk,ld.so.cache,localtime,machine-id,nsswitch.conf,passwd,pki,resolv.conf,ssl |
71 | private-tmp | 71 | private-tmp |