diff options
Diffstat (limited to 'etc/cvlc.profile')
-rw-r--r-- | etc/cvlc.profile | 27 |
1 files changed, 3 insertions, 24 deletions
diff --git a/etc/cvlc.profile b/etc/cvlc.profile index e0d32da0f..f095f487e 100644 --- a/etc/cvlc.profile +++ b/etc/cvlc.profile | |||
@@ -5,29 +5,8 @@ include /etc/firejail/cvlc.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
7 | 7 | ||
8 | noblacklist ${HOME}/.config/vlc | ||
9 | |||
10 | include /etc/firejail/disable-common.inc | ||
11 | include /etc/firejail/disable-devel.inc | ||
12 | include /etc/firejail/disable-passwdmgr.inc | ||
13 | include /etc/firejail/disable-programs.inc | ||
14 | |||
15 | caps.drop all | ||
16 | netfilter | ||
17 | # nogroups | ||
18 | nonewprivs | ||
19 | noroot | ||
20 | protocol unix,inet,inet6,netlink | ||
21 | seccomp | ||
22 | shell none | ||
23 | tracelog | ||
24 | |||
25 | # clvc doesn't like private-bin | 8 | # clvc doesn't like private-bin |
26 | # private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc | 9 | ignore private-bin |
27 | private-dev | ||
28 | private-tmp | ||
29 | 10 | ||
30 | # mdwe is disabled due to breaking hardware accelerated decoding | 11 | # Redirect |
31 | # memory-deny-write-execute | 12 | include /etc/firejail/vlc.profile |
32 | noexec ${HOME} | ||
33 | noexec /tmp | ||