From 7071bfdf8ab4553711525f2c22a357662eaa8d52 Mon Sep 17 00:00:00 2001 From: greigdp Date: Wed, 7 Oct 2015 09:47:33 +0100 Subject: Add a profile for Spotify --- etc/spotify.profile | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 etc/spotify.profile diff --git a/etc/spotify.profile b/etc/spotify.profile new file mode 100644 index 000000000..3b2360a65 --- /dev/null +++ b/etc/spotify.profile @@ -0,0 +1,19 @@ +# Spotify profile +include /etc/firejail/disable-mgmt.inc +include /etc/firejail/disable-secret.inc +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-history.inc + +# Whitelist the folders needed by Spotify - This is more restrictive +# than a blacklist though, but this is all spotify requires for +# streaming audio +whitelist ${HOME}/.config/spotify +whitelist ${HOME}/.local/share/spotify +whitelist ${HOME}/.cache/spotify +# Whitelist the pulseaudio config, to allow PulseAudio workaround (Issue #69) +whitelist ${HOME}/.config/pulse + +caps.drop all +seccomp +netfilter +noroot -- cgit v1.2.3-70-g09d2