aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/unknown-horizons.profile
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
commit018d75775eab4a0f045949a9d069c57686ca2686 (patch)
treeaac3a1a65cca0d4875795c55109a5c3e35efdefb /etc/profile-m-z/unknown-horizons.profile
parentsmall fixes (diff)
downloadfirejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.gz
firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.zst
firejail-018d75775eab4a0f045949a9d069c57686ca2686.zip
reorganize github etc directory
Diffstat (limited to 'etc/profile-m-z/unknown-horizons.profile')
-rw-r--r--etc/profile-m-z/unknown-horizons.profile44
1 files changed, 44 insertions, 0 deletions
diff --git a/etc/profile-m-z/unknown-horizons.profile b/etc/profile-m-z/unknown-horizons.profile
new file mode 100644
index 000000000..7dc13e284
--- /dev/null
+++ b/etc/profile-m-z/unknown-horizons.profile
@@ -0,0 +1,44 @@
1# Firejail profile for unknown-horizons
2# Description: 2D realtime strategy simulation
3# This file is overwritten after every install/update
4# Persistent local customizations
5include unknown-horizons.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.unknown-horizons
10
11include disable-common.inc
12include disable-exec.inc
13include disable-passwdmgr.inc
14include disable-programs.inc
15
16mkdir ${HOME}/.unknown-horizons
17whitelist ${HOME}/.unknown-horizons
18include whitelist-common.inc
19include whitelist-runuser-common.inc
20whitelist /usr/share/unknown-horizons
21include whitelist-usr-share-common.inc
22include whitelist-var-common.inc
23
24apparmor
25caps.drop all
26nodvd
27nogroups
28nonewprivs
29noroot
30notv
31nou2f
32novideo
33protocol unix,inet,inet6,netlink
34seccomp
35shell none
36
37disable-mnt
38# private-bin unknown-horizons
39private-dev
40# private-etc alternatives,ca-certificates,crypto-policies,pki,ssl
41private-tmp
42
43# doesn't work - maybe all Tcl/Tk programs have this problem
44# memory-deny-write-execute