From bca8a78ca1b77663a23436b046cdd48928331487 Mon Sep 17 00:00:00 2001
From: Fred-Barclay <Fred-Barclay@users.noreply.github.com>
Date: Wed, 4 Oct 2017 11:44:47 -0500
Subject: Tighten spotify profile

---
 etc/spotify.profile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/etc/spotify.profile b/etc/spotify.profile
index a9f6cc461..3506b793b 100644
--- a/etc/spotify.profile
+++ b/etc/spotify.profile
@@ -27,6 +27,7 @@ whitelist ${HOME}/.cache/spotify
 whitelist ${HOME}/.config/spotify
 whitelist ${HOME}/.local/share/spotify
 include /etc/firejail/whitelist-common.inc
+include /etc/firejail/whitelist-var-common.inc
 
 caps.drop all
 netfilter
@@ -42,6 +43,7 @@ disable-mnt
 private-bin spotify,bash,sh,dash
 private-dev
 private-etc fonts,machine-id,pulse,resolv.conf
+private-opt spotify
 private-tmp
 
 noexec ${HOME}
-- 
cgit v1.2.3-54-g00ecf