summaryrefslogtreecommitdiffstats
path: root/etc/kino.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/kino.profile')
-rw-r--r--etc/kino.profile27
1 files changed, 12 insertions, 15 deletions
diff --git a/etc/kino.profile b/etc/kino.profile
index b37569340..73b1e060b 100644
--- a/etc/kino.profile
+++ b/etc/kino.profile
@@ -5,28 +5,25 @@ include /etc/firejail/globals.local
5# Persistent customizations should go in a .local file. 5# Persistent customizations should go in a .local file.
6include /etc/firejail/kino.local 6include /etc/firejail/kino.local
7 7
8################################
9# Generic GUI application profile
10################################
11noblacklist ~/.kinorc 8noblacklist ~/.kinorc
12noblacklist ~/.kino-history 9noblacklist ~/.kino-history
10
13include /etc/firejail/disable-common.inc 11include /etc/firejail/disable-common.inc
14include /etc/firejail/disable-programs.inc 12include /etc/firejail/disable-devel.inc
15include /etc/firejail/disable-passwdmgr.inc 13include /etc/firejail/disable-passwdmgr.inc
14include /etc/firejail/disable-programs.inc
16 15
17caps.drop all 16caps.drop all
18netfilter 17nogroups
19nonewprivs 18nonewprivs
20noroot 19noroot
21protocol unix,inet,inet6 20novideo
21protocol unix
22seccomp 22seccomp
23shell none
24
25private-dev
26private-tmp
23 27
24# 28noexec ${HOME}
25# depending on your usage, you can enable some of the commands below: 29noexec /tmp
26#
27# nogroups
28# shell none
29# private-bin program
30# private-etc none
31# private-dev
32# private-tmp