aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar rusty-snake <41237666+rusty-snake@users.noreply.github.com>2021-07-28 09:05:32 +0200
committerLibravatar rusty-snake <41237666+rusty-snake@users.noreply.github.com>2021-07-28 09:05:32 +0200
commit8f867d029a6ae7b757190d9f273886d4bbc1344b (patch)
treea34afc4a39a19bbe9e0b612586ff9ef62217b5f4 /etc
parentUpdate RELNOTES (diff)
downloadfirejail-8f867d029a6ae7b757190d9f273886d4bbc1344b.tar.gz
firejail-8f867d029a6ae7b757190d9f273886d4bbc1344b.tar.zst
firejail-8f867d029a6ae7b757190d9f273886d4bbc1344b.zip
Refactor code.profile as electron redirect
closes #4408
Diffstat (limited to 'etc')
-rw-r--r--etc/profile-a-l/code.profile39
1 files changed, 18 insertions, 21 deletions
diff --git a/etc/profile-a-l/code.profile b/etc/profile-a-l/code.profile
index e19b78908..fdf94ec41 100644
--- a/etc/profile-a-l/code.profile
+++ b/etc/profile-a-l/code.profile
@@ -5,6 +5,21 @@ include code.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8# Disabled until someone reported positive feedback
9ignore include disable-devel.inc
10ignore include disable-exec.inc
11ignore include disable-interpreters.inc
12ignore include disable-xdg.inc
13ignore whitelist ${DOWNLOADS}
14ignore include whitelist-common.inc
15ignore include whitelist-runuser-common.inc
16ignore include whitelist-usr-share-common.inc
17ignore include whitelist-var-common.inc
18ignore apparmor
19ignore disable-mnt
20ignore dbus-user none
21ignore dbus-system none
22
8noblacklist ${HOME}/.config/Code 23noblacklist ${HOME}/.config/Code
9noblacklist ${HOME}/.config/Code - OSS 24noblacklist ${HOME}/.config/Code - OSS
10noblacklist ${HOME}/.vscode 25noblacklist ${HOME}/.vscode
@@ -13,31 +28,13 @@ noblacklist ${HOME}/.vscode-oss
13# Allows files commonly used by IDEs 28# Allows files commonly used by IDEs
14include allow-common-devel.inc 29include allow-common-devel.inc
15 30
16include disable-common.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19
20caps.drop all
21netfilter
22nodvd
23nogroups
24noinput
25nonewprivs
26noroot
27nosound 31nosound
28notv
29nou2f
30novideo
31protocol unix,inet,inet6,netlink
32seccomp
33shell none
34
35private-cache
36private-dev
37private-tmp
38 32
39# Disabling noexec ${HOME} for now since it will 33# Disabling noexec ${HOME} for now since it will
40# probably interfere with running some programmes 34# probably interfere with running some programmes
41# in VS Code 35# in VS Code
42# noexec ${HOME} 36# noexec ${HOME}
43noexec /tmp 37noexec /tmp
38
39# Redirect
40include electron.profile