aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/xiphos.profile
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
commit018d75775eab4a0f045949a9d069c57686ca2686 (patch)
treeaac3a1a65cca0d4875795c55109a5c3e35efdefb /etc/profile-m-z/xiphos.profile
parentsmall fixes (diff)
downloadfirejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.gz
firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.zst
firejail-018d75775eab4a0f045949a9d069c57686ca2686.zip
reorganize github etc directory
Diffstat (limited to 'etc/profile-m-z/xiphos.profile')
-rw-r--r--etc/profile-m-z/xiphos.profile50
1 files changed, 50 insertions, 0 deletions
diff --git a/etc/profile-m-z/xiphos.profile b/etc/profile-m-z/xiphos.profile
new file mode 100644
index 000000000..7114f0469
--- /dev/null
+++ b/etc/profile-m-z/xiphos.profile
@@ -0,0 +1,50 @@
1# Firejail profile for xiphos
2# Description: Environment for Bible reading, study, and research
3# This file is overwritten after every install/update
4# Persistent local customizations
5include xiphos.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.sword
10noblacklist ${HOME}/.xiphos
11
12blacklist ${HOME}/.bashrc
13
14include disable-common.inc
15include disable-devel.inc
16include disable-exec.inc
17include disable-interpreters.inc
18include disable-passwdmgr.inc
19include disable-programs.inc
20
21mkdir ${HOME}/.sword
22mkdir ${HOME}/.xiphos
23whitelist ${HOME}/.sword
24whitelist ${HOME}/.xiphos
25include whitelist-common.inc
26include whitelist-var-common.inc
27
28apparmor
29caps.drop all
30machine-id
31netfilter
32nodvd
33nogroups
34nonewprivs
35noroot
36nosound
37notv
38nou2f
39novideo
40protocol unix,inet,inet6
41seccomp
42shell none
43tracelog
44
45disable-mnt
46private-bin xiphos
47private-cache
48private-dev
49private-etc alternatives,ca-certificates,crypto-policies,fonts,pki,resolv.conf,ssli,sword,sword.conf
50private-tmp