aboutsummaryrefslogtreecommitdiffstats
path: root/etc/wire.profile
diff options
context:
space:
mode:
authorLibravatar Fred Barclay <Fred-Barclay@users.noreply.github.com>2017-08-07 13:41:08 -0500
committerLibravatar GitHub <noreply@github.com>2017-08-07 13:41:08 -0500
commite24b15f8647997dbb26a7152c921af94e36294ce (patch)
tree4c98b42844c8c67853643d4b4b7253dbd8764f1e /etc/wire.profile
parentmerges (diff)
parentUnify last 8 profiles (diff)
downloadfirejail-e24b15f8647997dbb26a7152c921af94e36294ce.tar.gz
firejail-e24b15f8647997dbb26a7152c921af94e36294ce.tar.zst
firejail-e24b15f8647997dbb26a7152c921af94e36294ce.zip
Merge pull request #1427 from SpotComms/pr
Unify all profiles
Diffstat (limited to 'etc/wire.profile')
-rw-r--r--etc/wire.profile23
1 files changed, 11 insertions, 12 deletions
diff --git a/etc/wire.profile b/etc/wire.profile
index 71147ebc1..aacea9940 100644
--- a/etc/wire.profile
+++ b/etc/wire.profile
@@ -1,31 +1,30 @@
1# Persistent global definitions go here 1# Firejail profile for wire
2# This file is overwritten after every install/update
3# Persistent local customizations
4include /etc/firejail/wire.local
5# Persistent global definitions
2include /etc/firejail/globals.local 6include /etc/firejail/globals.local
3 7
4# This file is overwritten during software install. 8# Note: the current beta version of wire is located in /opt/Wire/wire and therefore not in PATH.
5# Persistent customizations should go in a .local file. 9# To use wire with firejail run "firejail /opt/Wire/wire"
6include /etc/firejail/wire.local
7 10
8# wire messenger profile
9noblacklist ~/.config/Wire 11noblacklist ~/.config/Wire
10noblacklist ~/.config/wire 12noblacklist ~/.config/wire
11 13
12include /etc/firejail/disable-common.inc 14include /etc/firejail/disable-common.inc
13include /etc/firejail/disable-programs.inc
14include /etc/firejail/disable-devel.inc 15include /etc/firejail/disable-devel.inc
15include /etc/firejail/disable-passwdmgr.inc 16include /etc/firejail/disable-passwdmgr.inc
17include /etc/firejail/disable-programs.inc
16 18
17caps.drop all 19caps.drop all
18netfilter 20netfilter
19nonewprivs
20nogroups 21nogroups
22nonewprivs
21noroot 23noroot
22protocol unix,inet,inet6,netlink 24protocol unix,inet,inet6,netlink
23seccomp 25seccomp
24shell none 26shell none
25 27
26private-tmp
27private-dev
28disable-mnt 28disable-mnt
29 29private-dev
30# Note: the current beta version of wire is located in /opt/Wire/wire and therefore not in PATH. 30private-tmp
31# To use wire with firejail run "firejail /opt/Wire/wire"