diff options
Diffstat (limited to 'etc/default.profile')
-rw-r--r-- | etc/default.profile | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/etc/default.profile b/etc/default.profile new file mode 100644 index 000000000..603321316 --- /dev/null +++ b/etc/default.profile | |||
@@ -0,0 +1,24 @@ | |||
1 | ################################ | ||
2 | # Generic GUI application profile | ||
3 | ################################ | ||
4 | include /etc/firejail/disable-common.inc | ||
5 | include /etc/firejail/disable-programs.inc | ||
6 | include /etc/firejail/disable-passwdmgr.inc | ||
7 | |||
8 | caps.drop all | ||
9 | netfilter | ||
10 | nonewprivs | ||
11 | noroot | ||
12 | protocol unix,inet,inet6 | ||
13 | seccomp | ||
14 | |||
15 | # | ||
16 | # depending on you usage, you can enable some of the commands below: | ||
17 | # | ||
18 | # nogroups | ||
19 | # shell none | ||
20 | # private-bin program | ||
21 | # private-etc none | ||
22 | # private-dev | ||
23 | # private-tmp | ||
24 | |||