diff options
author | netblue30 <netblue30@yahoo.com> | 2017-08-23 07:48:04 -0400 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2017-08-23 07:48:04 -0400 |
commit | 75adc32b0c3f8a0be5b92961a9861f429ad1aba0 (patch) | |
tree | 4b8e7ddabc146d7a80026a7fcf231c049bf86829 /etc/neverball.profile | |
parent | merges (diff) | |
parent | Merge pull request #1489 from smitsohu/profilefixes (diff) | |
download | firejail-75adc32b0c3f8a0be5b92961a9861f429ad1aba0.tar.gz firejail-75adc32b0c3f8a0be5b92961a9861f429ad1aba0.tar.zst firejail-75adc32b0c3f8a0be5b92961a9861f429ad1aba0.zip |
Merge branch 'master' of https://github.com/netblue30/firejail
Diffstat (limited to 'etc/neverball.profile')
-rw-r--r-- | etc/neverball.profile | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/etc/neverball.profile b/etc/neverball.profile new file mode 100644 index 000000000..6a9a3a577 --- /dev/null +++ b/etc/neverball.profile | |||
@@ -0,0 +1,37 @@ | |||
1 | # Firejail profile for neverball | ||
2 | # This file is overwritten after every install/update | ||
3 | # Persistent local customizations | ||
4 | include /etc/firejail/neverball.local | ||
5 | # Persistent global definitions | ||
6 | include /etc/firejail/globals.local | ||
7 | |||
8 | noblacklist ${HOME}/.neverball | ||
9 | |||
10 | include /etc/firejail/disable-common.inc | ||
11 | include /etc/firejail/disable-devel.inc | ||
12 | include /etc/firejail/disable-passwdmgr.inc | ||
13 | include /etc/firejail/disable-programs.inc | ||
14 | |||
15 | mkdir ${HOME}/.neverball | ||
16 | whitelist ${HOME}/.neverball | ||
17 | include /etc/firejail/whitelist-common.inc | ||
18 | |||
19 | caps.drop all | ||
20 | netfilter | ||
21 | nodvd | ||
22 | nogroups | ||
23 | nonewprivs | ||
24 | noroot | ||
25 | notv | ||
26 | novideo | ||
27 | protocol unix,netlink | ||
28 | seccomp | ||
29 | shell none | ||
30 | |||
31 | disable-mnt | ||
32 | private-bin neverball | ||
33 | private-dev | ||
34 | private-tmp | ||
35 | |||
36 | noexec ${HOME} | ||
37 | noexec /tmp | ||