diff options
author | 2017-08-23 07:44:41 -0400 | |
---|---|---|
committer | 2017-08-23 07:44:41 -0400 | |
commit | 1ebc6a73e1354a34bb580d04cb5d7c8de73bc1ee (patch) | |
tree | aee88ca3e5d38f7f6ae02a9ebcc34db6dbdf26ba /etc/neverball.profile | |
parent | undo RELNOTES (diff) | |
parent | Add private-etc to Xonotic (diff) | |
download | firejail-1ebc6a73e1354a34bb580d04cb5d7c8de73bc1ee.tar.gz firejail-1ebc6a73e1354a34bb580d04cb5d7c8de73bc1ee.tar.zst firejail-1ebc6a73e1354a34bb580d04cb5d7c8de73bc1ee.zip |
Merge pull request #1488 from SpotComms/mf
Various changes
Diffstat (limited to 'etc/neverball.profile')
-rw-r--r-- | etc/neverball.profile | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/etc/neverball.profile b/etc/neverball.profile new file mode 100644 index 000000000..6a9a3a577 --- /dev/null +++ b/etc/neverball.profile | |||
@@ -0,0 +1,37 @@ | |||
1 | # Firejail profile for neverball | ||
2 | # This file is overwritten after every install/update | ||
3 | # Persistent local customizations | ||
4 | include /etc/firejail/neverball.local | ||
5 | # Persistent global definitions | ||
6 | include /etc/firejail/globals.local | ||
7 | |||
8 | noblacklist ${HOME}/.neverball | ||
9 | |||
10 | include /etc/firejail/disable-common.inc | ||
11 | include /etc/firejail/disable-devel.inc | ||
12 | include /etc/firejail/disable-passwdmgr.inc | ||
13 | include /etc/firejail/disable-programs.inc | ||
14 | |||
15 | mkdir ${HOME}/.neverball | ||
16 | whitelist ${HOME}/.neverball | ||
17 | include /etc/firejail/whitelist-common.inc | ||
18 | |||
19 | caps.drop all | ||
20 | netfilter | ||
21 | nodvd | ||
22 | nogroups | ||
23 | nonewprivs | ||
24 | noroot | ||
25 | notv | ||
26 | novideo | ||
27 | protocol unix,netlink | ||
28 | seccomp | ||
29 | shell none | ||
30 | |||
31 | disable-mnt | ||
32 | private-bin neverball | ||
33 | private-dev | ||
34 | private-tmp | ||
35 | |||
36 | noexec ${HOME} | ||
37 | noexec /tmp | ||