diff options
Diffstat (limited to 'etc')
-rw-r--r-- | etc/disable-programs.inc | 1 | ||||
-rw-r--r-- | etc/mediathekview.profile | 25 |
2 files changed, 26 insertions, 0 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index da80376d1..032d50b36 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -236,6 +236,7 @@ blacklist ${HOME}/.local/share/zathura | |||
236 | blacklist ${HOME}/.lv2 | 236 | blacklist ${HOME}/.lv2 |
237 | blacklist ${HOME}/.mcabber | 237 | blacklist ${HOME}/.mcabber |
238 | blacklist ${HOME}/.mcabberrc | 238 | blacklist ${HOME}/.mcabberrc |
239 | blacklist ${HOME}/.mediathek3 | ||
239 | blacklist ${HOME}/.mozilla | 240 | blacklist ${HOME}/.mozilla |
240 | blacklist ${HOME}/.mozilla/seamonkey | 241 | blacklist ${HOME}/.mozilla/seamonkey |
241 | blacklist ${HOME}/.mpdconf | 242 | blacklist ${HOME}/.mpdconf |
diff --git a/etc/mediathekview.profile b/etc/mediathekview.profile new file mode 100644 index 000000000..ec5b507ae --- /dev/null +++ b/etc/mediathekview.profile | |||
@@ -0,0 +1,25 @@ | |||
1 | # This file is overwritten during software install. | ||
2 | # Persistent customizations should go in a .local file. | ||
3 | include /etc/firejail/mediathekview.local | ||
4 | |||
5 | # MediathekView profile | ||
6 | noblacklist ~/.mediathek3 | ||
7 | noblacklist ~/.config/vlc | ||
8 | include /etc/firejail/disable-common.inc | ||
9 | include /etc/firejail/disable-programs.inc | ||
10 | include /etc/firejail/disable-devel.inc | ||
11 | include /etc/firejail/disable-passwdmgr.inc | ||
12 | |||
13 | caps.drop all | ||
14 | netfilter | ||
15 | nonewprivs | ||
16 | noroot | ||
17 | protocol unix,inet,inet6 | ||
18 | seccomp | ||
19 | tracelog | ||
20 | |||
21 | noexec ${HOME} | ||
22 | noexec /tmp | ||
23 | |||
24 | private-dev | ||
25 | private-tmp | ||