aboutsummaryrefslogtreecommitdiffstats
path: root/etc/nyx.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/nyx.profile')
-rw-r--r--etc/nyx.profile18
1 files changed, 6 insertions, 12 deletions
diff --git a/etc/nyx.profile b/etc/nyx.profile
index aa3275a00..d5e1e1f84 100644
--- a/etc/nyx.profile
+++ b/etc/nyx.profile
@@ -1,20 +1,18 @@
1# Firejail profile for nyx 1# Firejail profile for nyx
2# Description: Command-line status monitor for tor
2# This file is overwritten after every install/update 3# This file is overwritten after every install/update
3# Persistent local customizations 4# Persistent local customizations
4include nyx.local 5include nyx.local
5# Persistent global definitions 6# Persistent global definitions
6include globals.local 7include globals.local
7 8
9noblacklist ${PATH}/python2*
8noblacklist ${PATH}/python3* 10noblacklist ${PATH}/python3*
9noblacklist /usr/include/python3* 11noblacklist /usr/lib/python2*
10noblacklist /usr/lib/python3* 12noblacklist /usr/lib/python3*
11noblacklist /usr/local/lib/python3*
12noblacklist /usr/share/python3*
13 13
14noblacklist ${HOME}/.nyx 14noblacklist ${HOME}/.nyx
15
16mkdir ${HOME}/.nyx 15mkdir ${HOME}/.nyx
17
18whitelist ${HOME}/.nyx 16whitelist ${HOME}/.nyx
19 17
20include disable-common.inc 18include disable-common.inc
@@ -24,9 +22,8 @@ include disable-passwdmgr.inc
24include disable-programs.inc 22include disable-programs.inc
25include disable-xdg.inc 23include disable-xdg.inc
26 24
27# apparmor
28caps.drop all 25caps.drop all
29# ipc-namespace 26ipc-namespace
30netfilter 27netfilter
31no3d 28no3d
32nodbus 29nodbus
@@ -41,18 +38,15 @@ novideo
41protocol unix,inet,inet6 38protocol unix,inet,inet6
42seccomp 39seccomp
43shell none 40shell none
44# tracelog
45 41
46disable-mnt 42disable-mnt
47private-bin nyx,python 43private-bin nyx,python*
48private-cache 44private-cache
49private-dev 45private-dev
50private-etc passwd,tor 46private-etc passwd,tor,fonts
51# private-lib
52private-opt none 47private-opt none
53private-srv none 48private-srv none
54private-tmp 49private-tmp
55 50
56# memory-deny-write-execute
57noexec ${HOME} 51noexec ${HOME}
58noexec /tmp 52noexec /tmp