diff options
Diffstat (limited to 'etc/cvlc.profile')
| -rw-r--r-- | etc/cvlc.profile | 29 |
1 files changed, 4 insertions, 25 deletions
diff --git a/etc/cvlc.profile b/etc/cvlc.profile index e0d32da0f..81ccbc530 100644 --- a/etc/cvlc.profile +++ b/etc/cvlc.profile | |||
| @@ -5,29 +5,8 @@ include /etc/firejail/cvlc.local | |||
| 5 | # Persistent global definitions | 5 | # Persistent global definitions |
| 6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
| 7 | 7 | ||
| 8 | noblacklist ${HOME}/.config/vlc | 8 | # cvlc doesn't like private-bin |
| 9 | ignore private-bin | ||
| 9 | 10 | ||
| 10 | include /etc/firejail/disable-common.inc | 11 | # Redirect |
| 11 | include /etc/firejail/disable-devel.inc | 12 | include /etc/firejail/vlc.profile |
| 12 | include /etc/firejail/disable-passwdmgr.inc | ||
| 13 | include /etc/firejail/disable-programs.inc | ||
| 14 | |||
| 15 | caps.drop all | ||
| 16 | netfilter | ||
| 17 | # nogroups | ||
| 18 | nonewprivs | ||
| 19 | noroot | ||
| 20 | protocol unix,inet,inet6,netlink | ||
| 21 | seccomp | ||
| 22 | shell none | ||
| 23 | tracelog | ||
| 24 | |||
| 25 | # clvc doesn't like private-bin | ||
| 26 | # private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc | ||
| 27 | private-dev | ||
| 28 | private-tmp | ||
| 29 | |||
| 30 | # mdwe is disabled due to breaking hardware accelerated decoding | ||
| 31 | # memory-deny-write-execute | ||
| 32 | noexec ${HOME} | ||
| 33 | noexec /tmp | ||