aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/psi-plus.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-m-z/psi-plus.profile')
-rw-r--r--etc/profile-m-z/psi-plus.profile45
1 files changed, 45 insertions, 0 deletions
diff --git a/etc/profile-m-z/psi-plus.profile b/etc/profile-m-z/psi-plus.profile
new file mode 100644
index 000000000..16fffe517
--- /dev/null
+++ b/etc/profile-m-z/psi-plus.profile
@@ -0,0 +1,45 @@
1# Firejail profile for psi-plus
2# Description: Qt-based XMPP/Jabber client
3# This file is overwritten after every install/update
4# Persistent local customizations
5include psi-plus.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/psi+
10noblacklist ${HOME}/.local/share/psi+
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18
19mkdir ${HOME}/.cache/psi+
20mkdir ${HOME}/.config/psi+
21mkdir ${HOME}/.local/share/psi+
22whitelist ${DOWNLOADS}
23whitelist ${HOME}/.cache/psi+
24whitelist ${HOME}/.config/psi+
25whitelist ${HOME}/.local/share/psi+
26include whitelist-common.inc
27
28caps.drop all
29netfilter
30no3d
31nodvd
32nogroups
33nonewprivs
34noroot
35notv
36nou2f
37novideo
38protocol unix,inet,inet6
39# QtWebengine needs chroot to set up its own sandbox
40seccomp !chroot
41shell none
42
43disable-mnt
44private-dev
45private-tmp