aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/rhythmbox.profile
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
commit018d75775eab4a0f045949a9d069c57686ca2686 (patch)
treeaac3a1a65cca0d4875795c55109a5c3e35efdefb /etc/profile-m-z/rhythmbox.profile
parentsmall fixes (diff)
downloadfirejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.gz
firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.zst
firejail-018d75775eab4a0f045949a9d069c57686ca2686.zip
reorganize github etc directory
Diffstat (limited to 'etc/profile-m-z/rhythmbox.profile')
-rw-r--r--etc/profile-m-z/rhythmbox.profile52
1 files changed, 52 insertions, 0 deletions
diff --git a/etc/profile-m-z/rhythmbox.profile b/etc/profile-m-z/rhythmbox.profile
new file mode 100644
index 000000000..e8f964383
--- /dev/null
+++ b/etc/profile-m-z/rhythmbox.profile
@@ -0,0 +1,52 @@
1# Firejail profile for rhythmbox
2# Description: Music player and organizer for GNOME
3# This file is overwritten after every install/update
4# Persistent local customizations
5include rhythmbox.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${MUSIC}
10noblacklist ${HOME}/.cache/rhythmbox
11noblacklist ${HOME}/.local/share/rhythmbox
12
13# Allow python (blacklisted by disable-interpreters.inc)
14include allow-python2.inc
15include allow-python3.inc
16
17include disable-common.inc
18include disable-devel.inc
19include disable-exec.inc
20include disable-interpreters.inc
21include disable-passwdmgr.inc
22include disable-programs.inc
23include disable-xdg.inc
24
25whitelist /usr/share/rhythmbox
26whitelist /usr/share/lua
27whitelist /usr/share/libquvi-scripts
28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc
30include whitelist-var-common.inc
31
32apparmor
33caps.drop all
34netfilter
35nogroups
36nonewprivs
37noroot
38notv
39nou2f
40novideo
41protocol unix,inet,inet6,netlink
42seccomp
43shell none
44tracelog
45
46private-bin rhythmbox,rhythmbox-client
47private-dev
48private-tmp
49
50# makes settings immutable
51# dbus-user none
52# dbus-system none