aboutsummaryrefslogtreecommitdiffstats
path: root/etc/simutrans.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/simutrans.profile')
-rw-r--r--etc/simutrans.profile39
1 files changed, 14 insertions, 25 deletions
diff --git a/etc/simutrans.profile b/etc/simutrans.profile
index b1df0ba28..d67d2a575 100644
--- a/etc/simutrans.profile
+++ b/etc/simutrans.profile
@@ -1,41 +1,30 @@
1# Persistent global definitions go here 1# Firejail profile for simutrans
2# This file is overwritten after every install/update
3# Persistent local customizations
4include /etc/firejail/simutrans.local
5# Persistent global definitions
2include /etc/firejail/globals.local 6include /etc/firejail/globals.local
3 7
4# This file is overwritten during software install. 8noblacklist ~/.simutrans
5# Persistent customizations should go in a .local file.
6include /etc/firejail/simutrans.local
7 9
8################################ 10include /etc/firejail/disable-common.inc
9# simutrans profile 11include /etc/firejail/disable-passwdmgr.inc
10################################ 12include /etc/firejail/disable-programs.inc
11 13
12noblacklist ~/.simutrans
13mkdir ~/.simutrans 14mkdir ~/.simutrans
14whitelist ~/.simutrans 15whitelist ~/.simutrans
15include /etc/firejail/whitelist-common.inc 16include /etc/firejail/whitelist-common.inc
16 17
17include /etc/firejail/disable-common.inc
18include /etc/firejail/disable-programs.inc
19include /etc/firejail/disable-passwdmgr.inc
20
21caps.drop all 18caps.drop all
19net none
20nogroups
22nonewprivs 21nonewprivs
23noroot 22noroot
24protocol unix 23protocol unix
25seccomp 24seccomp
26
27#
28# depending on your usage, you can enable some of the commands below:
29#
30net none
31nogroups
32shell none 25shell none
33#private-bin simutrans 26
34# private-etc none 27# private-bin simutrans
35private-dev 28private-dev
29# private-etc none
36private-tmp 30private-tmp
37# nosound
38
39
40
41