aboutsummaryrefslogtreecommitdiffstats
path: root/etc/xonotic.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/xonotic.profile')
-rw-r--r--etc/xonotic.profile25
1 files changed, 8 insertions, 17 deletions
diff --git a/etc/xonotic.profile b/etc/xonotic.profile
index 957636124..95a2a2dbd 100644
--- a/etc/xonotic.profile
+++ b/etc/xonotic.profile
@@ -1,31 +1,22 @@
1# Persistent global definitions go here 1# Firejail profile for xonotic
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/xonotic.local 4include /etc/firejail/xonotic.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7 7
8#
9#Profile for xonotic
10#
11
12#No Blacklist Paths
13noblacklist ${HOME}/.xonotic 8noblacklist ${HOME}/.xonotic
14 9
15#Blacklist Paths
16include /etc/firejail/disable-common.inc 10include /etc/firejail/disable-common.inc
17include /etc/firejail/disable-programs.inc
18include /etc/firejail/disable-passwdmgr.inc
19include /etc/firejail/disable-devel.inc 11include /etc/firejail/disable-devel.inc
12include /etc/firejail/disable-passwdmgr.inc
13include /etc/firejail/disable-programs.inc
20 14
21#Whitelist Paths
22mkdir ${HOME}/.xonotic 15mkdir ${HOME}/.xonotic
23whitelist ${HOME}/.xonotic 16whitelist ${HOME}/.xonotic
24include /etc/firejail/whitelist-common.inc 17include /etc/firejail/whitelist-common.inc
25 18
26#Options
27caps.drop all 19caps.drop all
28#ipc-namespace
29netfilter 20netfilter
30nogroups 21nogroups
31nonewprivs 22nonewprivs
@@ -35,10 +26,10 @@ protocol unix,inet,inet6
35seccomp 26seccomp
36shell none 27shell none
37 28
29disable-mnt
38private-bin xonotic-sdl,xonotic-glx,blind-id 30private-bin xonotic-sdl,xonotic-glx,blind-id
39private-dev 31private-dev
40private-tmp 32private-tmp
41disable-mnt
42 33
43noexec ${HOME} 34noexec ${HOME}
44noexec /tmp 35noexec /tmp