aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/exfalso.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-a-l/exfalso.profile')
-rw-r--r--etc/profile-a-l/exfalso.profile54
1 files changed, 4 insertions, 50 deletions
diff --git a/etc/profile-a-l/exfalso.profile b/etc/profile-a-l/exfalso.profile
index 192858304..92e4395c5 100644
--- a/etc/profile-a-l/exfalso.profile
+++ b/etc/profile-a-l/exfalso.profile
@@ -4,58 +4,12 @@
4# Persistent local customizations 4# Persistent local customizations
5include exfalso.local 5include exfalso.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7# added by included profile
8#include globals.local
8 9
9noblacklist ${HOME}/.quodlibet
10noblacklist ${MUSIC}
11
12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc
14include allow-python3.inc
15
16whitelist ${DOWNLOADS}
17whitelist ${MUSIC}
18
19include disable-common.inc
20include disable-devel.inc
21include disable-exec.inc
22include disable-interpreters.inc
23include disable-passwdmgr.inc
24include disable-programs.inc
25include disable-shell.inc
26include disable-xdg.inc
27
28mkdir ${HOME}/.quodlibet
29whitelist ${HOME}/.quodlibet
30include whitelist-common.inc
31include whitelist-usr-share-common.inc
32include whitelist-var-common.inc
33
34caps.drop all
35ipc-namespace
36machine-id
37netfilter
38no3d
39nodvd
40nogroups
41nonewprivs
42noroot
43nosound
44notv
45nou2f
46novideo
47protocol unix,inet,inet6
48seccomp
49shell none
50
51private-bin exfalso,python*
52private-cache
53private-dev
54private-etc alternatives,fonts,group,passwd
55private-lib libatk-1.0.so.*,libgdk-3.so.*,libgdk_pixbuf-2.0.so.*,libgirepository-1.0.so.*,libgstreamer-1.0.so.*,libgtk-3.so.*,libgtksourceview-3.0.so.*,libpango-1.0.so.*,libpython*,libreadline.so.*,libsoup-2.4.so.*,libssl.so.1.*,python2*,python3* 10private-lib libatk-1.0.so.*,libgdk-3.so.*,libgdk_pixbuf-2.0.so.*,libgirepository-1.0.so.*,libgstreamer-1.0.so.*,libgtk-3.so.*,libgtksourceview-3.0.so.*,libpango-1.0.so.*,libpython*,libreadline.so.*,libsoup-2.4.so.*,libssl.so.1.*,python2*,python3*
56private-tmp
57 11
58dbus-user none 12dbus-user none
59dbus-system none
60 13
61#memory-deny-write-execute - breaks on Arch (see issue #1803) 14# Redirect
15include quodlibet.profile