aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/electron-common.profile
diff options
context:
space:
mode:
authorLibravatar pirate486743186 <>2023-03-16 02:30:52 +0100
committerLibravatar pirate486743186 <>2023-03-16 15:00:37 +0100
commit47e3c82ab58b0d0c02066666aea3f7a04078c86b (patch)
tree10d06366bb00a50209ea0c24366e599061cff53a /etc/profile-a-l/electron-common.profile
parentfirejail.txt: remove extraneous endif (diff)
downloadfirejail-47e3c82ab58b0d0c02066666aea3f7a04078c86b.tar.gz
firejail-47e3c82ab58b0d0c02066666aea3f7a04078c86b.tar.zst
firejail-47e3c82ab58b0d0c02066666aea3f7a04078c86b.zip
create blink-common.profile
Diffstat (limited to 'etc/profile-a-l/electron-common.profile')
-rw-r--r--etc/profile-a-l/electron-common.profile25
1 files changed, 3 insertions, 22 deletions
diff --git a/etc/profile-a-l/electron-common.profile b/etc/profile-a-l/electron-common.profile
index 73b6d1067..bb48d6332 100644
--- a/etc/profile-a-l/electron-common.profile
+++ b/etc/profile-a-l/electron-common.profile
@@ -7,40 +7,21 @@ include electron-common.local
7noblacklist ${HOME}/.config/Electron 7noblacklist ${HOME}/.config/Electron
8noblacklist ${HOME}/.config/electron*-flag*.conf 8noblacklist ${HOME}/.config/electron*-flag*.conf
9 9
10include disable-common.inc
11include disable-devel.inc
12include disable-exec.inc
13include disable-interpreters.inc
14include disable-programs.inc
15include disable-xdg.inc
16
17whitelist ${DOWNLOADS}
18whitelist ${HOME}/.config/Electron 10whitelist ${HOME}/.config/Electron
19whitelist ${HOME}/.config/electron*-flag*.conf 11whitelist ${HOME}/.config/electron*-flag*.conf
20include whitelist-common.inc
21include whitelist-runuser-common.inc
22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc
24 12
25# If your kernel allows the creation of user namespaces by unprivileged users 13# If your kernel allows the creation of user namespaces by unprivileged users
26# (for example, if running `unshare -U echo enabled` prints "enabled"), you 14# (for example, if running `unshare -U echo enabled` prints "enabled"), you
27# can add the next line to your electron-common.local. 15# can add the next line to your electron-common.local.
28#include electron-common-hardened.inc.profile 16#include electron-common-hardened.inc.profile
29 17
30apparmor
31caps.keep sys_admin,sys_chroot
32netfilter
33nodvd
34nogroups
35noinput
36notv
37nou2f 18nou2f
38novideo 19novideo
39 20
40disable-mnt
41private-cache
42private-dev 21private-dev
43private-tmp 22private-tmp
44 23
45dbus-user none 24dbus-user none
46dbus-system none 25
26# Redirect
27include blink-common.profile