aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/typespeed.profile
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@protonmail.com>2024-04-29 12:50:46 -0400
committerLibravatar netblue30 <netblue30@protonmail.com>2024-04-29 12:50:46 -0400
commit4c5f558995acb202a4ae3aee08022da854b6ebb2 (patch)
treec4a3e9f202bcf828ba5bcd437f478ca4f1e6270b /etc/profile-m-z/typespeed.profile
parentwhitelisting /var/games by default (diff)
downloadfirejail-4c5f558995acb202a4ae3aee08022da854b6ebb2.tar.gz
firejail-4c5f558995acb202a4ae3aee08022da854b6ebb2.tar.zst
firejail-4c5f558995acb202a4ae3aee08022da854b6ebb2.zip
several kids programs
Diffstat (limited to 'etc/profile-m-z/typespeed.profile')
-rw-r--r--etc/profile-m-z/typespeed.profile48
1 files changed, 48 insertions, 0 deletions
diff --git a/etc/profile-m-z/typespeed.profile b/etc/profile-m-z/typespeed.profile
new file mode 100644
index 000000000..08263ccb0
--- /dev/null
+++ b/etc/profile-m-z/typespeed.profile
@@ -0,0 +1,48 @@
1# Firejail profile for typespeed
2# Persistent local customizations
3include typespeed.local
4# Persistent global definitions
5include globals.local
6
7# Note: this profile requires the current user to be a member of games group
8
9include disable-common.inc
10include disable-devel.inc
11include disable-exec.inc
12include disable-interpreters.inc
13include disable-programs.inc
14include disable-xdg.inc
15
16include whitelist-run-common.inc
17include whitelist-runuser-common.inc
18whitelist /usr/share/typespeed
19include whitelist-usr-share-common.inc
20writable-var # game scores stored under /var/games
21include whitelist-var-common.inc
22
23apparmor
24caps.drop all
25ipc-namespace
26netfilter
27nodvd
28noinput
29nonewprivs
30noroot
31notv
32nou2f
33novideo
34protocol unix,inet,inet6,netlink
35seccomp
36tracelog
37
38disable-mnt
39private
40private-dev
41private-etc @x11,@sound,@games
42private-tmp
43
44dbus-user none
45dbus-system none
46
47memory-deny-write-execute
48restrict-namespaces