diff options
Diffstat (limited to 'etc/cvlc.profile')
| -rw-r--r-- | etc/cvlc.profile | 27 |
1 files changed, 3 insertions, 24 deletions
diff --git a/etc/cvlc.profile b/etc/cvlc.profile index e0d32da0f..f095f487e 100644 --- a/etc/cvlc.profile +++ b/etc/cvlc.profile | |||
| @@ -5,29 +5,8 @@ include /etc/firejail/cvlc.local | |||
| 5 | # Persistent global definitions | 5 | # Persistent global definitions |
| 6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
| 7 | 7 | ||
| 8 | noblacklist ${HOME}/.config/vlc | ||
| 9 | |||
| 10 | include /etc/firejail/disable-common.inc | ||
| 11 | include /etc/firejail/disable-devel.inc | ||
| 12 | include /etc/firejail/disable-passwdmgr.inc | ||
| 13 | include /etc/firejail/disable-programs.inc | ||
| 14 | |||
| 15 | caps.drop all | ||
| 16 | netfilter | ||
| 17 | # nogroups | ||
| 18 | nonewprivs | ||
| 19 | noroot | ||
| 20 | protocol unix,inet,inet6,netlink | ||
| 21 | seccomp | ||
| 22 | shell none | ||
| 23 | tracelog | ||
| 24 | |||
| 25 | # clvc doesn't like private-bin | 8 | # clvc doesn't like private-bin |
| 26 | # private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc | 9 | ignore private-bin |
| 27 | private-dev | ||
| 28 | private-tmp | ||
| 29 | 10 | ||
| 30 | # mdwe is disabled due to breaking hardware accelerated decoding | 11 | # Redirect |
| 31 | # memory-deny-write-execute | 12 | include /etc/firejail/vlc.profile |
| 32 | noexec ${HOME} | ||
| 33 | noexec /tmp | ||