aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/celluloid.profile
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
commit018d75775eab4a0f045949a9d069c57686ca2686 (patch)
treeaac3a1a65cca0d4875795c55109a5c3e35efdefb /etc/profile-a-l/celluloid.profile
parentsmall fixes (diff)
downloadfirejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.gz
firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.zst
firejail-018d75775eab4a0f045949a9d069c57686ca2686.zip
reorganize github etc directory
Diffstat (limited to 'etc/profile-a-l/celluloid.profile')
-rw-r--r--etc/profile-a-l/celluloid.profile54
1 files changed, 54 insertions, 0 deletions
diff --git a/etc/profile-a-l/celluloid.profile b/etc/profile-a-l/celluloid.profile
new file mode 100644
index 000000000..9be6b1631
--- /dev/null
+++ b/etc/profile-a-l/celluloid.profile
@@ -0,0 +1,54 @@
1# Firejail profile for celluloid
2# Description: Simple GTK+ frontend for mpv
3# This file is overwritten after every install/update
4# Persistent local customizations
5include celluloid.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/celluloid
10noblacklist ${HOME}/.config/gnome-mpv
11noblacklist ${HOME}/.config/youtube-dl
12noblacklist ${MUSIC}
13noblacklist ${VIDEOS}
14
15# Allow python (blacklisted by disable-interpreters.inc)
16include allow-python2.inc
17include allow-python3.inc
18
19include disable-common.inc
20include disable-devel.inc
21include disable-exec.inc
22include disable-interpreters.inc
23include disable-passwdmgr.inc
24include disable-programs.inc
25include disable-xdg.inc
26
27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc
30
31apparmor
32caps.drop all
33netfilter
34nogroups
35nonewprivs
36noroot
37nou2f
38protocol unix,inet,inet6
39seccomp
40shell none
41tracelog
42
43private-bin celluloid,env,gnome-mpv,python*,youtube-dl
44private-cache
45private-etc alternatives,ca-certificates,crypto-policies,dconf,drirc,fonts,gtk-3.0,hosts,ld.so.cache,libva.conf,localtime,machine-id,pkcs11,pki,resolv.conf,selinux,ssl,xdg
46private-dev
47private-tmp
48
49# uses dconf, MPRIS
50# dbus-user none
51# dbus-system none
52
53read-only ${HOME}
54read-write ${HOME}/.config/celluloid