1 files changed, 23 insertions, 0 deletions

diff --git a/etc/wesnoth.profile b/etc/wesnoth.profile
new file mode 100644
index 000000000..697b81bcb
--- /dev/null
+++ b/etc/wesnoth.profile
@@ -0,0 +1,23 @@
+# Whitelist-based profile for "Battle of Wesnoth" (game).
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-mgmt.inc
+include /etc/firejail/disable-secret.inc
+include /etc/firejail/disable-terminals.inc
+
+caps.drop all
+seccomp
+protocol unix,inet,inet6
+noroot
+
+private-dev
+
+private-tmp
+
+mkdir ${HOME}/.local/share/wesnoth
+mkdir ${HOME}/.config/wesnoth
+mkdir ${HOME}/.cache/wesnoth
+whitelist ${HOME}/.local/share/wesnoth
+whitelist ${HOME}/.config/wesnoth
+whitelist ${HOME}/.cache/wesnoth