1 files changed, 17 insertions, 0 deletions

diff --git a/etc/parole.profile b/etc/parole.profile
new file mode 100644
index 000000000..24181c8d6
--- /dev/null
+++ b/etc/parole.profile
@@ -0,0 +1,17 @@
+# Profile for Parole, the default XFCE4 media player
+include /etc/firejail/disable-mgmt.inc
+include /etc/firejail/disable-secret.inc
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-devel.inc
+private-etc passwd,group,fonts
+private-bin parole,dbus-launch
+blacklist ${HOME}/.pki/nssdb
+blacklist ${HOME}/.lastpass
+blacklist ${HOME}/.keepassx
+blacklist ${HOME}/.password-store
+caps.drop all
+seccomp
+protocol unix,inet,inet6
+netfilter
+noroot
+shell none