From 840082cfcbc6ca7008a77b970441b65b980a601c Mon Sep 17 00:00:00 2001 From: bitfreak25 Date: Mon, 1 Jan 2018 18:32:02 +0100 Subject: Add profile for "playonlinux" This profile have been successfully tested by starting a windows application through it. "wine.profile" has been used as template for this. Only "noblacklist ${PATH}/nc" has been added because playonlinux needs it to run. Please note that this is currently not tested due to security aspects, so it may need a rework later on. Because opening a unknown windows application through it could possibly be a security risk. --- etc/playonlinux.profile | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 etc/playonlinux.profile diff --git a/etc/playonlinux.profile b/etc/playonlinux.profile new file mode 100644 index 000000000..676b6a5c6 --- /dev/null +++ b/etc/playonlinux.profile @@ -0,0 +1,28 @@ +# Firejail profile for playonlinux +# This file is overwritten after every install/update +# Persistent local customizations +include /etc/firejail/playonlinux.local +# Persistent global definitions +include /etc/firejail/globals.local + +noblacklist ${HOME}/.Steam +noblacklist ${HOME}/.local/share/Steam +noblacklist ${HOME}/.local/share/steam +noblacklist ${HOME}/.steam +noblacklist ${HOME}/.PlayOnLinux + +# nc is needed to run playonlinux +noblacklist ${PATH}/nc + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-programs.inc + +caps.drop all +netfilter +nodvd +nogroups +nonewprivs +noroot +notv +seccomp -- cgit v1.2.3-54-g00ecf