diff options
| author |  greigdp <greigdp@users.noreply.github.com> | 2015-10-07 09:47:33 +0100 |
|---|---|---|
| committer | greigdp <greigdp@users.noreply.github.com> | 2015-10-07 09:47:33 +0100 |
| commit | 7071bfdf8ab4553711525f2c22a357662eaa8d52 (patch) | |
| tree | 06bb17d91d36f9e18a90eaaa5300db96bb994354 /etc | |
| parent | main page (diff) | |
| download | firejail-7071bfdf8ab4553711525f2c22a357662eaa8d52.tar.gz firejail-7071bfdf8ab4553711525f2c22a357662eaa8d52.tar.zst firejail-7071bfdf8ab4553711525f2c22a357662eaa8d52.zip | |
Add a profile for Spotify
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/spotify.profile | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/etc/spotify.profile b/etc/spotify.profile new file mode 100644 index 000000000..3b2360a65 --- /dev/null +++ b/etc/spotify.profile | |||
| @@ -0,0 +1,19 @@ | |||
| 1 | # Spotify profile | ||
| 2 | include /etc/firejail/disable-mgmt.inc | ||
| 3 | include /etc/firejail/disable-secret.inc | ||
| 4 | include /etc/firejail/disable-common.inc | ||
| 5 | include /etc/firejail/disable-history.inc | ||
| 6 | |||
| 7 | # Whitelist the folders needed by Spotify - This is more restrictive | ||
| 8 | # than a blacklist though, but this is all spotify requires for | ||
| 9 | # streaming audio | ||
| 10 | whitelist ${HOME}/.config/spotify | ||
| 11 | whitelist ${HOME}/.local/share/spotify | ||
| 12 | whitelist ${HOME}/.cache/spotify | ||
| 13 | # Whitelist the pulseaudio config, to allow PulseAudio workaround (Issue #69) | ||
| 14 | whitelist ${HOME}/.config/pulse | ||
| 15 | |||
| 16 | caps.drop all | ||
| 17 | seccomp | ||
| 18 | netfilter | ||
| 19 | noroot | ||