aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/file.profile
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
commit018d75775eab4a0f045949a9d069c57686ca2686 (patch)
treeaac3a1a65cca0d4875795c55109a5c3e35efdefb /etc/profile-a-l/file.profile
parentsmall fixes (diff)
downloadfirejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.gz
firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.zst
firejail-018d75775eab4a0f045949a9d069c57686ca2686.zip
reorganize github etc directory
Diffstat (limited to 'etc/profile-a-l/file.profile')
-rw-r--r--etc/profile-a-l/file.profile48
1 files changed, 48 insertions, 0 deletions
diff --git a/etc/profile-a-l/file.profile b/etc/profile-a-l/file.profile
new file mode 100644
index 000000000..74620d4cd
--- /dev/null
+++ b/etc/profile-a-l/file.profile
@@ -0,0 +1,48 @@
1# Firejail profile for file
2# Description: Recognize the type of data in a file using "magic" numbers
3# This file is overwritten after every install/update
4quiet
5# Persistent local customizations
6include file.local
7# Persistent global definitions
8include globals.local
9
10blacklist ${RUNUSER}/wayland-*
11blacklist ${RUNUSER}
12
13include disable-common.inc
14include disable-exec.inc
15include disable-passwdmgr.inc
16include disable-programs.inc
17
18apparmor
19caps.drop all
20hostname file
21ipc-namespace
22machine-id
23net none
24no3d
25nodvd
26nogroups
27nonewprivs
28nosound
29notv
30nou2f
31novideo
32protocol unix
33seccomp
34shell none
35tracelog
36x11 none
37
38#private-bin bzip2,file,gzip,lrzip,lz4,lzip,xz,zstd
39private-cache
40private-dev
41#private-etc alternatives,localtime,magic,magic.mgc
42#private-lib file,libarchive.so.*,libfakeroot,libmagic.so.*,libseccomp.so.*
43
44dbus-user none
45dbus-system none
46
47memory-deny-write-execute
48read-only ${HOME}