diff options
Diffstat (limited to 'etc/cvlc.profile')
-rw-r--r-- | etc/cvlc.profile | 29 |
1 files changed, 4 insertions, 25 deletions
diff --git a/etc/cvlc.profile b/etc/cvlc.profile index e0d32da0f..81ccbc530 100644 --- a/etc/cvlc.profile +++ b/etc/cvlc.profile | |||
@@ -5,29 +5,8 @@ include /etc/firejail/cvlc.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
7 | 7 | ||
8 | noblacklist ${HOME}/.config/vlc | 8 | # cvlc doesn't like private-bin |
9 | ignore private-bin | ||
9 | 10 | ||
10 | include /etc/firejail/disable-common.inc | 11 | # Redirect |
11 | include /etc/firejail/disable-devel.inc | 12 | include /etc/firejail/vlc.profile |
12 | include /etc/firejail/disable-passwdmgr.inc | ||
13 | include /etc/firejail/disable-programs.inc | ||
14 | |||
15 | caps.drop all | ||
16 | netfilter | ||
17 | # nogroups | ||
18 | nonewprivs | ||
19 | noroot | ||
20 | protocol unix,inet,inet6,netlink | ||
21 | seccomp | ||
22 | shell none | ||
23 | tracelog | ||
24 | |||
25 | # clvc doesn't like private-bin | ||
26 | # private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc | ||
27 | private-dev | ||
28 | private-tmp | ||
29 | |||
30 | # mdwe is disabled due to breaking hardware accelerated decoding | ||
31 | # memory-deny-write-execute | ||
32 | noexec ${HOME} | ||
33 | noexec /tmp | ||