1 files changed, 19 insertions, 0 deletions

diff --git a/etc/spotify.profile b/etc/spotify.profile
new file mode 100644
index 000000000..3b2360a65
--- /dev/null
+++ b/etc/spotify.profile
@@ -0,0 +1,19 @@
+# Spotify profile
+include /etc/firejail/disable-mgmt.inc
+include /etc/firejail/disable-secret.inc
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-history.inc
+
+# Whitelist the folders needed by Spotify - This is more restrictive 
+# than a blacklist though, but this is all spotify requires for 
+# streaming audio
+whitelist ${HOME}/.config/spotify
+whitelist ${HOME}/.local/share/spotify
+whitelist ${HOME}/.cache/spotify
+# Whitelist the pulseaudio config, to allow PulseAudio workaround (Issue #69)
+whitelist ${HOME}/.config/pulse
+
+caps.drop all
+seccomp
+netfilter
+noroot