aboutsummaryrefslogtreecommitdiffstats
path: root/etc/picard.profile
diff options
context:
space:
mode:
authorLibravatar Tad <tad@spotco.us>2017-08-03 21:56:03 -0400
committerLibravatar Tad <tad@spotco.us>2017-08-03 22:42:38 -0400
commit0f1b7e5ebf3092cc0de52fc84cc5d3c512913093 (patch)
treefab9a934d6b45fd6ca6cf8526baa4b53b747c5d2 /etc/picard.profile
parentMerge pull request #1430 from VladimirSchowalter20/master (diff)
downloadfirejail-0f1b7e5ebf3092cc0de52fc84cc5d3c512913093.tar.gz
firejail-0f1b7e5ebf3092cc0de52fc84cc5d3c512913093.tar.zst
firejail-0f1b7e5ebf3092cc0de52fc84cc5d3c512913093.zip
Add 12 new profiles
apktool, Baobab, dex2jar, gitg, Hashcat, MusicBrainz Picard, OBS Studio, Remmina, sdat2img, Sound Converter, SQLiteBrowser, Truecraft
Diffstat (limited to 'etc/picard.profile')
-rw-r--r--etc/picard.profile32
1 files changed, 32 insertions, 0 deletions
diff --git a/etc/picard.profile b/etc/picard.profile
new file mode 100644
index 000000000..0c99e6b3e
--- /dev/null
+++ b/etc/picard.profile
@@ -0,0 +1,32 @@
1# Persistent global definitions go here
2include /etc/firejail/globals.local
3
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/picard.local
7
8# Firejail profile for MusicBrainz Picard
9noblacklist ${HOME}/.cache/MusicBrainz
10noblacklist ${HOME}/.config/MusicBrainz
11
12include /etc/firejail/disable-common.inc
13include /etc/firejail/disable-devel.inc
14include /etc/firejail/disable-passwdmgr.inc
15include /etc/firejail/disable-programs.inc
16
17caps.drop all
18no3d
19nogroups
20nonewprivs
21noroot
22nosound
23novideo
24protocol unix,inet,inet6
25seccomp
26shell none
27
28private-dev
29private-tmp
30
31noexec ${HOME}
32noexec /tmp