aboutsummaryrefslogtreecommitdiffstats
path: root/etc/orage.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/orage.profile')
-rw-r--r--etc/orage.profile23
1 files changed, 13 insertions, 10 deletions
diff --git a/etc/orage.profile b/etc/orage.profile
index ea577f873..c9977d002 100644
--- a/etc/orage.profile
+++ b/etc/orage.profile
@@ -7,24 +7,27 @@ include /etc/firejail/orage.local
7 7
8noblacklist ${HOME}/.config/orage 8noblacklist ${HOME}/.config/orage
9noblacklist ${HOME}/.local/share/orage 9noblacklist ${HOME}/.local/share/orage
10
10include /etc/firejail/disable-common.inc 11include /etc/firejail/disable-common.inc
11include /etc/firejail/disable-programs.inc 12include /etc/firejail/disable-devel.inc
12include /etc/firejail/disable-passwdmgr.inc 13include /etc/firejail/disable-passwdmgr.inc
14include /etc/firejail/disable-programs.inc
13 15
14caps.drop all 16caps.drop all
15netfilter 17netfilter
18no3d
19nogroups
16nonewprivs 20nonewprivs
17noroot 21noroot
18protocol unix,inet,inet6 22nosound
23novideo
24protocol unix
19seccomp 25seccomp
20
21#
22# depending on your usage, you can enable some of the commands below:
23#
24nogroups
25shell none 26shell none
26# private-bin program 27
27# private-etc none
28private-dev 28private-dev
29# private-tmp 29private-tmp
30disable-mnt
30 31
32noexec ${HOME}
33noexec /tmp