aboutsummaryrefslogtreecommitdiffstats
path: root/etc/pingus.profile
diff options
context:
space:
mode:
authorLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
committerLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
commit9e3ba319be6b9546d7e8f450ca419ee2f3f4040b (patch)
tree0aebe82de78a61877c267f4dcb2ebcc13a2e37c9 /etc/pingus.profile
parentvarious profile fixes (#1433) (diff)
downloadfirejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.gz
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.zst
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.zip
Unify all profiles
Diffstat (limited to 'etc/pingus.profile')
-rw-r--r--etc/pingus.profile41
1 files changed, 17 insertions, 24 deletions
diff --git a/etc/pingus.profile b/etc/pingus.profile
index b3b479046..6699b7944 100644
--- a/etc/pingus.profile
+++ b/etc/pingus.profile
@@ -1,41 +1,34 @@
1# Persistent global definitions go here 1# Firejail profile for pingus
2# This file is overwritten after every install/update
3# Persistent local customizations
4include /etc/firejail/pingus.local
5# Persistent global definitions
2include /etc/firejail/globals.local 6include /etc/firejail/globals.local
3 7
4# This file is overwritten during software install. 8noblacklist ~/.pingus
5# Persistent customizations should go in a .local file.
6include /etc/firejail/pingus.local
7 9
8################################ 10include /etc/firejail/disable-common.inc
9# Pinugs profile 11include /etc/firejail/disable-passwdmgr.inc
10################################ 12include /etc/firejail/disable-programs.inc
11 13
12noblacklist ~/.pingus
13mkdir ~/.pingus 14mkdir ~/.pingus
14whitelist ~/.pingus 15whitelist ~/.pingus
15include /etc/firejail/whitelist-common.inc 16include /etc/firejail/whitelist-common.inc
16 17
17include /etc/firejail/disable-common.inc
18include /etc/firejail/disable-programs.inc
19include /etc/firejail/disable-passwdmgr.inc
20
21caps.drop all 18caps.drop all
19net none
20nogroups
22nonewprivs 21nonewprivs
23noroot 22noroot
24protocol unix,netlink 23protocol unix,netlink
25seccomp 24seccomp
26
27#
28# depending on your usage, you can enable some of the commands below:
29#
30net none
31nogroups
32shell none 25shell none
33#private-bin pingus 26
34# private-etc none 27# private-bin pingus
35private-dev 28private-dev
29# private-etc none
36private-tmp 30private-tmp
37# nosound
38
39
40
41 31
32# CLOBBERED COMMENTS
33# depending on your usage, you can enable some of the commands below:
34# nosound