diff options
Diffstat (limited to 'etc/mpd.profile')
| -rw-r--r-- | etc/mpd.profile | 19 |
1 files changed, 7 insertions, 12 deletions
diff --git a/etc/mpd.profile b/etc/mpd.profile index 44baab7e9..ebcdca443 100644 --- a/etc/mpd.profile +++ b/etc/mpd.profile | |||
| @@ -5,22 +5,17 @@ include /etc/firejail/mpd.local | |||
| 5 | # Persistent global definitions | 5 | # Persistent global definitions |
| 6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
| 7 | 7 | ||
| 8 | blacklist /boot | ||
| 9 | blacklist /media | ||
| 10 | blacklist /mnt | ||
| 11 | blacklist /opt | ||
| 12 | 8 | ||
| 13 | whitelist ${HOME}/.config/pulse/ | 9 | noblacklist ${HOME}/.mpdconf |
| 14 | whitelist ${HOME}/.mpdconf | 10 | |
| 15 | whitelist ${HOME}/.pulse/ | 11 | include /etc/firejail/disable-common.inc |
| 16 | whitelist ${HOME}/Music | 12 | include /etc/firejail/disable-devel.inc |
| 17 | whitelist ${HOME}/mpd | 13 | include /etc/firejail/disable-passwdmgr.inc |
| 18 | include /etc/firejail/whitelist-common.inc | 14 | include /etc/firejail/disable-programs.inc |
| 19 | 15 | ||
| 20 | caps.drop all | 16 | caps.drop all |
| 21 | noroot | 17 | noroot |
| 22 | seccomp | 18 | seccomp |
| 23 | 19 | ||
| 24 | private-bin mpd,bash | 20 | #private-bin mpd,bash |
| 25 | private-dev | 21 | private-dev |
| 26 | read-only ${HOME}/Music/ | ||