aboutsummaryrefslogtreecommitdiffstats
path: root/etc/newsboat.profile
diff options
context:
space:
mode:
authorLibravatar Fred Barclay <Fred-Barclay@users.noreply.github.com>2019-04-18 11:15:33 -0500
committerLibravatar Fred Barclay <Fred-Barclay@users.noreply.github.com>2019-04-18 11:15:33 -0500
commit5f7f3a5e26bbac22934daab982b4099b6cd5c492 (patch)
tree53ffe95a5931df229ffd9d380efcf7ba4e36da20 /etc/newsboat.profile
parentAllow access to .pythonrc.py -- see #2651 (diff)
parentMerge pull request #2641 from rusty-snake/add-cheese (diff)
downloadfirejail-5f7f3a5e26bbac22934daab982b4099b6cd5c492.tar.gz
firejail-5f7f3a5e26bbac22934daab982b4099b6cd5c492.tar.zst
firejail-5f7f3a5e26bbac22934daab982b4099b6cd5c492.zip
Merge branch 'master' of https://github.com/netblue30/firejail
Diffstat (limited to 'etc/newsboat.profile')
-rw-r--r--etc/newsboat.profile47
1 files changed, 47 insertions, 0 deletions
diff --git a/etc/newsboat.profile b/etc/newsboat.profile
new file mode 100644
index 000000000..e063abe53
--- /dev/null
+++ b/etc/newsboat.profile
@@ -0,0 +1,47 @@
1# Firejail profile for Newsboat
2# Description: RSS program
3# This file is overwritten after every install/update
4# Persistent local customizations
5include newsboat.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.newsboat
10
11include disable-common.inc
12include disable-devel.inc
13include disable-exec.inc
14include disable-interpreters.inc
15include disable-passwdmgr.inc
16include disable-programs.inc
17include disable-xdg.inc
18
19mkdir ${HOME}/.newsboat
20whitelist ${HOME}/.newsboat
21include whitelist-common.inc
22include whitelist-var-common.inc
23
24caps.drop all
25ipc-namespace
26netfilter
27no3d
28nodbus
29nodvd
30nogroups
31nonewprivs
32noroot
33notv
34nou2f
35novideo
36protocol inet,inet6
37seccomp
38shell none
39
40disable-mnt
41private-bin newsboat
42private-cache
43private-dev
44private-etc alternatives,ca-certificates,crypto-policies,pki,resolv.conf,ssl,terminfo
45private-tmp
46
47memory-deny-write-execute