aboutsummaryrefslogtreecommitdiffstats
path: root/etc/flashpeak-slimjet.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/flashpeak-slimjet.profile')
-rw-r--r--etc/flashpeak-slimjet.profile46
1 files changed, 21 insertions, 25 deletions
diff --git a/etc/flashpeak-slimjet.profile b/etc/flashpeak-slimjet.profile
index b9bf493b6..b3aa80f85 100644
--- a/etc/flashpeak-slimjet.profile
+++ b/etc/flashpeak-slimjet.profile
@@ -1,26 +1,26 @@
1# Persistent global definitions go here 1# Firejail profile for flashpeak-slimjet
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/flashpeak-slimjet.local 4include /etc/firejail/flashpeak-slimjet.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7 7
8# SlimJet browser profile
9# This is a whitelisted profile, the internal browser sandbox
10# is disabled because it requires sudo password. The command
11# to run it is as follows:
12#
13# firejail flashpeak-slimjet --no-sandbox
14#
15noblacklist ~/.config/slimjet
16noblacklist ~/.cache/slimjet 8noblacklist ~/.cache/slimjet
9noblacklist ~/.config/slimjet
17noblacklist ~/.pki 10noblacklist ~/.pki
11
18include /etc/firejail/disable-common.inc 12include /etc/firejail/disable-common.inc
13# include /etc/firejail/disable-devel.inc
19include /etc/firejail/disable-programs.inc 14include /etc/firejail/disable-programs.inc
20 15
21# chromium is distributed with a perl script on Arch 16mkdir ~/.cache/slimjet
22# include /etc/firejail/disable-devel.inc 17mkdir ~/.config/slimjet
23# 18mkdir ~/.pki
19whitelist ${DOWNLOADS}
20whitelist ~/.cache/slimjet
21whitelist ~/.config/slimjet
22whitelist ~/.pki
23include /etc/firejail/whitelist-common.inc
24 24
25caps.drop all 25caps.drop all
26netfilter 26netfilter
@@ -29,12 +29,8 @@ noroot
29protocol unix,inet,inet6,netlink 29protocol unix,inet,inet6,netlink
30seccomp 30seccomp
31 31
32whitelist ${DOWNLOADS} 32# CLOBBERED COMMENTS
33mkdir ~/.config/slimjet 33# firejail flashpeak-slimjet --no-sandbox
34whitelist ~/.config/slimjet 34# chromium is distributed with a perl script on Arch
35mkdir ~/.cache/slimjet 35# is disabled because it requires sudo password. The command
36whitelist ~/.cache/slimjet 36# to run it is as follows:
37mkdir ~/.pki
38whitelist ~/.pki
39
40include /etc/firejail/whitelist-common.inc