private-bin conversion

1 files changed, 12 insertions, 11 deletions

diff --git a/etc/stellarium.profile b/etc/stellarium.profile
index 148ec949d..d0c1326b3 100644
--- a/etc/stellarium.profile
+++ b/etc/stellarium.profile
@@ -1,28 +1,29 @@
 # Firejail profile for Stellarium.
-
-# Noblacklist
 noblacklist ~/.stellarium
 noblacklist ~/.config/stellarium
-
-# Include
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
 
-# Call these options
+# Whitelist
+mkdir ~/.stellarium
+whitelist ~/.stellarium
+mkdir ~/.config
+mkdir ~/.config/stellarium
+whitelist ~/.config/stellarium
+
 caps.drop all
 netfilter
+nogroups
 nonewprivs
 noroot
+nosound
 protocol unix,inet,inet6,netlink
 seccomp
+shell none
 tracelog
 
-# Whitelist
-mkdir ~/.stellarium
-whitelist ~/.stellarium
+private-bin stellarium
+private-dev
 
-mkdir ~/.config
-mkdir ~/.config/stellarium
-whitelist ~/.config/stellarium