diff options
Diffstat (limited to 'etc/palemoon.profile')
-rw-r--r-- | etc/palemoon.profile | 62 |
1 files changed, 30 insertions, 32 deletions
diff --git a/etc/palemoon.profile b/etc/palemoon.profile index b3b57f931..e3e498195 100644 --- a/etc/palemoon.profile +++ b/etc/palemoon.profile | |||
@@ -1,37 +1,16 @@ | |||
1 | # Persistent global definitions go here | 1 | # Firejail profile for palemoon |
2 | include /etc/firejail/globals.local | 2 | # This file is overwritten after every install/update |
3 | 3 | # Persistent local customizations | |
4 | # This file is overwritten during software install. | ||
5 | # Persistent customizations should go in a .local file. | ||
6 | include /etc/firejail/palemoon.local | 4 | include /etc/firejail/palemoon.local |
5 | # Persistent global definitions | ||
6 | include /etc/firejail/globals.local | ||
7 | 7 | ||
8 | # Firejail profile for Pale Moon | ||
9 | noblacklist ~/.moonchild productions/pale moon | ||
10 | noblacklist ~/.cache/moonchild productions/pale moon | 8 | noblacklist ~/.cache/moonchild productions/pale moon |
9 | noblacklist ~/.moonchild productions/pale moon | ||
10 | |||
11 | include /etc/firejail/disable-common.inc | 11 | include /etc/firejail/disable-common.inc |
12 | include /etc/firejail/disable-programs.inc | ||
13 | include /etc/firejail/disable-devel.inc | 12 | include /etc/firejail/disable-devel.inc |
14 | include /etc/firejail/whitelist-common.inc | 13 | include /etc/firejail/disable-programs.inc |
15 | |||
16 | whitelist ${DOWNLOADS} | ||
17 | mkdir ~/.moonchild productions | ||
18 | whitelist ~/.moonchild productions | ||
19 | mkdir ~/.cache/moonchild productions/pale moon | ||
20 | whitelist ~/.cache/moonchild productions/pale moon | ||
21 | |||
22 | caps.drop all | ||
23 | netfilter | ||
24 | nogroups | ||
25 | nonewprivs | ||
26 | noroot | ||
27 | protocol unix,inet,inet6,netlink | ||
28 | seccomp | ||
29 | shell none | ||
30 | tracelog | ||
31 | |||
32 | #private-bin palemoon | ||
33 | #private-opt palemoon | ||
34 | private-tmp | ||
35 | 14 | ||
36 | # These are uncommented in the Firefox profile. If you run into trouble you may | 15 | # These are uncommented in the Firefox profile. If you run into trouble you may |
37 | # want to uncomment (some of) them. | 16 | # want to uncomment (some of) them. |
@@ -53,6 +32,25 @@ private-tmp | |||
53 | #whitelist ~/.config/pipelight-widevine | 32 | #whitelist ~/.config/pipelight-widevine |
54 | #whitelist ~/.config/pipelight-silverlight5.1 | 33 | #whitelist ~/.config/pipelight-silverlight5.1 |
55 | 34 | ||
56 | # experimental features | 35 | mkdir ~/.cache/moonchild productions/pale moon |
57 | #private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse | 36 | mkdir ~/.moonchild productions |
58 | #private-dev (disabled for now as it will interfere with webcam use in palemoon) | 37 | whitelist ${DOWNLOADS} |
38 | whitelist ~/.cache/moonchild productions/pale moon | ||
39 | whitelist ~/.moonchild productions | ||
40 | include /etc/firejail/whitelist-common.inc | ||
41 | |||
42 | caps.drop all | ||
43 | netfilter | ||
44 | nogroups | ||
45 | nonewprivs | ||
46 | noroot | ||
47 | protocol unix,inet,inet6,netlink | ||
48 | seccomp | ||
49 | shell none | ||
50 | tracelog | ||
51 | |||
52 | # private-bin palemoon | ||
53 | # private-dev (disabled for now as it will interfere with webcam use in palemoon) | ||
54 | # private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse | ||
55 | # private-opt palemoon | ||
56 | private-tmp | ||