aboutsummaryrefslogtreecommitdiffstats
path: root/etc/mumble.profile
diff options
context:
space:
mode:
authorLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
committerLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
commit9e3ba319be6b9546d7e8f450ca419ee2f3f4040b (patch)
tree0aebe82de78a61877c267f4dcb2ebcc13a2e37c9 /etc/mumble.profile
parentvarious profile fixes (#1433) (diff)
downloadfirejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.gz
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.zst
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.zip
Unify all profiles
Diffstat (limited to 'etc/mumble.profile')
-rw-r--r--etc/mumble.profile19
1 files changed, 9 insertions, 10 deletions
diff --git a/etc/mumble.profile b/etc/mumble.profile
index a2104957d..048b31b81 100644
--- a/etc/mumble.profile
+++ b/etc/mumble.profile
@@ -1,17 +1,17 @@
1# Persistent global definitions go here 1# Firejail profile for mumble
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/mumble.local 4include /etc/firejail/mumble.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7 7
8# mumble profile
9noblacklist ${HOME}/.config/Mumble 8noblacklist ${HOME}/.config/Mumble
10noblacklist ${HOME}/.local/share/data/Mumble 9noblacklist ${HOME}/.local/share/data/Mumble
10
11include /etc/firejail/disable-common.inc 11include /etc/firejail/disable-common.inc
12include /etc/firejail/disable-programs.inc
13include /etc/firejail/disable-devel.inc 12include /etc/firejail/disable-devel.inc
14include /etc/firejail/disable-passwdmgr.inc 13include /etc/firejail/disable-passwdmgr.inc
14include /etc/firejail/disable-programs.inc
15 15
16mkdir ${HOME}/.config/Mumble 16mkdir ${HOME}/.config/Mumble
17mkdir ${HOME}/.local/share/data/Mumble 17mkdir ${HOME}/.local/share/data/Mumble
@@ -20,20 +20,19 @@ whitelist ${HOME}/.local/share/data/Mumble
20include /etc/firejail/whitelist-common.inc 20include /etc/firejail/whitelist-common.inc
21 21
22caps.drop all 22caps.drop all
23#ipc-namespace
24netfilter 23netfilter
25no3d 24no3d
26nonewprivs
27nogroups 25nogroups
26nonewprivs
28noroot 27noroot
29protocol unix,inet,inet6 28protocol unix,inet,inet6
30seccomp 29seccomp
31shell none 30shell none
32tracelog 31tracelog
33 32
33disable-mnt
34private-bin mumble 34private-bin mumble
35private-tmp 35private-tmp
36disable-mnt
37 36
38memory-deny-write-execute 37memory-deny-write-execute
39noexec ${HOME} 38noexec ${HOME}