aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/wget.profile
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
commit018d75775eab4a0f045949a9d069c57686ca2686 (patch)
treeaac3a1a65cca0d4875795c55109a5c3e35efdefb /etc/profile-m-z/wget.profile
parentsmall fixes (diff)
downloadfirejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.gz
firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.zst
firejail-018d75775eab4a0f045949a9d069c57686ca2686.zip
reorganize github etc directory
Diffstat (limited to 'etc/profile-m-z/wget.profile')
-rw-r--r--etc/profile-m-z/wget.profile59
1 files changed, 59 insertions, 0 deletions
diff --git a/etc/profile-m-z/wget.profile b/etc/profile-m-z/wget.profile
new file mode 100644
index 000000000..65723e68c
--- /dev/null
+++ b/etc/profile-m-z/wget.profile
@@ -0,0 +1,59 @@
1# Firejail profile for wget
2# Description: Retrieves files from the web
3# This file is overwritten after every install/update
4quiet
5# Persistent local customizations
6include wget.local
7# Persistent global definitions
8include globals.local
9
10noblacklist ${HOME}/.netrc
11noblacklist ${HOME}/.wget-hsts
12noblacklist ${HOME}/.wgetrc
13
14blacklist /tmp/.X11-unix
15blacklist ${RUNUSER}/wayland-*
16blacklist ${RUNUSER}
17
18include disable-common.inc
19include disable-devel.inc
20include disable-exec.inc
21include disable-interpreters.inc
22include disable-passwdmgr.inc
23include disable-programs.inc
24# depending on workflow you can uncomment the below or put 'include disable-xdg.inc' in your wget.local
25#include disable-xdg.inc
26
27include whitelist-usr-share-common.inc
28include whitelist-var-common.inc
29
30apparmor
31caps.drop all
32ipc-namespace
33machine-id
34netfilter
35no3d
36nodvd
37nogroups
38nonewprivs
39noroot
40nosound
41notv
42nou2f
43novideo
44protocol unix,inet,inet6
45seccomp
46shell none
47tracelog
48
49private-bin wget
50private-cache
51private-dev
52# depending on workflow you can uncomment the below or put this private-etc in your wget.local
53#private-etc alternatives,ca-certificates,crypto-policies,pki,resolv.conf,ssl,wgetrc
54#private-tmp
55
56dbus-user none
57dbus-system none
58
59memory-deny-write-execute