From 9fd22cec3ba42475c773b792105f70f4bf783d39 Mon Sep 17 00:00:00 2001 From: valoq Date: Sat, 29 Oct 2016 19:10:06 +0200 Subject: added profile for wire --- etc/Wire.profile | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 etc/Wire.profile (limited to 'etc/Wire.profile') diff --git a/etc/Wire.profile b/etc/Wire.profile new file mode 100644 index 000000000..b488d75e4 --- /dev/null +++ b/etc/Wire.profile @@ -0,0 +1,22 @@ +# wire messenger profile + +noblacklist ~/.config/Wire + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc + +caps.drop all +netfilter +nonewprivs +nogroups +noroot +protocol unix,inet,inet6,netlink +seccomp +shell none + +private-tmp +private-dev + +# please note: the wire binary is currently identified with a capital W. This might change in future versions -- cgit v1.2.3-70-g09d2