diff options
Diffstat (limited to 'etc/ricochet.profile')
-rw-r--r-- | etc/ricochet.profile | 14 |
1 files changed, 8 insertions, 6 deletions
diff --git a/etc/ricochet.profile b/etc/ricochet.profile index 47b16b30e..423dfb887 100644 --- a/etc/ricochet.profile +++ b/etc/ricochet.profile | |||
@@ -5,14 +5,16 @@ include /etc/firejail/ricochet.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
7 | 7 | ||
8 | blacklist /boot | 8 | |
9 | blacklist /media | 9 | noblacklist ${HOME}/.local/share/Ricochet |
10 | blacklist /mnt | 10 | |
11 | blacklist /opt | 11 | include /etc/firejail/disable-common.inc |
12 | include /etc/firejail/disable-devel.inc | ||
13 | include /etc/firejail/disable-passwdmgr.inc | ||
14 | include /etc/firejail/disable-programs.inc | ||
12 | 15 | ||
13 | whitelist ${DOWNLOADS} | 16 | whitelist ${DOWNLOADS} |
14 | whitelist ${HOME}/.local/share/Ricochet | 17 | whitelist ${HOME}/.local/share/Ricochet |
15 | whitelist /tmp/.X11-unix | ||
16 | include /etc/firejail/whitelist-common.inc | 18 | include /etc/firejail/whitelist-common.inc |
17 | 19 | ||
18 | caps.drop all | 20 | caps.drop all |
@@ -24,7 +26,7 @@ shell none | |||
24 | 26 | ||
25 | private-bin ricochet,tor | 27 | private-bin ricochet,tor |
26 | private-dev | 28 | private-dev |
27 | private-etc fonts,tor,X11,alternatives | 29 | #private-etc fonts,tor,X11,alternatives |
28 | 30 | ||
29 | noexec /home | 31 | noexec /home |
30 | noexec /tmp | 32 | noexec /tmp |