diff options
Diffstat (limited to 'etc/xviewer.profile')
-rw-r--r-- | etc/xviewer.profile | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/etc/xviewer.profile b/etc/xviewer.profile index 7c4ede111..86d0b6d4a 100644 --- a/etc/xviewer.profile +++ b/etc/xviewer.profile | |||
@@ -5,8 +5,6 @@ include /etc/firejail/xviewer.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
7 | 7 | ||
8 | # blacklist /run/user/*/bus - makes settings immutable | ||
9 | |||
10 | noblacklist ${HOME}/.Steam | 8 | noblacklist ${HOME}/.Steam |
11 | noblacklist ${HOME}/.config/xviewer | 9 | noblacklist ${HOME}/.config/xviewer |
12 | noblacklist ${HOME}/.local/share/Trash | 10 | noblacklist ${HOME}/.local/share/Trash |
@@ -19,9 +17,13 @@ include /etc/firejail/disable-programs.inc | |||
19 | 17 | ||
20 | include /etc/firejail/whitelist-var-common.inc | 18 | include /etc/firejail/whitelist-var-common.inc |
21 | 19 | ||
20 | # following line makes settings immutable | ||
21 | apparmor | ||
22 | caps.drop all | 22 | caps.drop all |
23 | # net none - makes settings immutable | 23 | net none |
24 | no3d | 24 | no3d |
25 | # following line makes settings immutable | ||
26 | nodbus | ||
25 | nodvd | 27 | nodvd |
26 | nogroups | 28 | nogroups |
27 | nonewprivs | 29 | nonewprivs |