aboutsummaryrefslogtreecommitdiffstats
path: root/etc/google-chrome.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/google-chrome.profile')
-rw-r--r--etc/google-chrome.profile35
1 files changed, 17 insertions, 18 deletions
diff --git a/etc/google-chrome.profile b/etc/google-chrome.profile
index e6fceadec..84fdcdd21 100644
--- a/etc/google-chrome.profile
+++ b/etc/google-chrome.profile
@@ -1,39 +1,38 @@
1# Persistent global definitions go here 1# Firejail profile for google-chrome
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/google-chrome.local 4include /etc/firejail/google-chrome.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7 7
8# Google Chrome browser profile
9noblacklist ~/.config/google-chrome
10noblacklist ~/.cache/google-chrome 8noblacklist ~/.cache/google-chrome
9noblacklist ~/.config/google-chrome
11noblacklist ~/.pki 10noblacklist ~/.pki
12include /etc/firejail/disable-common.inc
13include /etc/firejail/disable-programs.inc
14 11
15# chromium is distributed with a perl script on Arch 12include /etc/firejail/disable-common.inc
16# include /etc/firejail/disable-devel.inc 13# include /etc/firejail/disable-devel.inc
17# 14include /etc/firejail/disable-programs.inc
18 15
19whitelist ${DOWNLOADS}
20mkdir ~/.config/google-chrome
21whitelist ~/.config/google-chrome
22mkdir ~/.cache/google-chrome 16mkdir ~/.cache/google-chrome
23whitelist ~/.cache/google-chrome 17mkdir ~/.config/google-chrome
24mkdir ~/.pki 18mkdir ~/.pki
19whitelist ${DOWNLOADS}
20whitelist ~/.cache/google-chrome
21whitelist ~/.config/google-chrome
25whitelist ~/.pki 22whitelist ~/.pki
26include /etc/firejail/whitelist-common.inc 23include /etc/firejail/whitelist-common.inc
27 24
28caps.keep sys_chroot,sys_admin 25caps.keep sys_chroot,sys_admin
29#ipc-namespace
30netfilter 26netfilter
31nogroups 27nogroups
32shell none 28shell none
33 29
34private-dev 30private-dev
35#private-tmp - problems with multiple browser sessions 31# private-tmp - problems with multiple browser sessions
36#disable-mnt
37 32
38noexec ${HOME} 33noexec ${HOME}
39noexec /tmp 34noexec /tmp
35
36# CLOBBERED COMMENTS
37# chromium is distributed with a perl script on Arch
38# disable-mnt