From 60606c2d041dc08b0af10baff1b18dbf507f8d81 Mon Sep 17 00:00:00 2001 From: Tad Date: Sat, 16 Sep 2017 13:47:31 -0400 Subject: Fixup 36 profiles --- etc/ardour5.profile | 25 +++++++++++-------------- 1 file changed, 11 insertions(+), 14 deletions(-) (limited to 'etc/ardour5.profile') diff --git a/etc/ardour5.profile b/etc/ardour5.profile index f17c74e2b..42744f4dd 100644 --- a/etc/ardour5.profile +++ b/etc/ardour5.profile @@ -5,19 +5,16 @@ include /etc/firejail/ardour5.local # Persistent global definitions include /etc/firejail/globals.local -blacklist /boot -blacklist /media -blacklist /mnt -blacklist /opt -blacklist /usr/local/bin -whitelist ${DOWNLOADS} -whitelist ${HOME}/.config/ardour4 -whitelist ${HOME}/.config/ardour5 -whitelist ${HOME}/.lv2 -whitelist ${HOME}/.vst -whitelist ${HOME}/Documents -include /etc/firejail/whitelist-common.inc +noblacklist ${HOME}/.config/ardour4 +noblacklist ${HOME}/.config/ardour5 +noblacklist ${HOME}/.lv2 +noblacklist ${HOME}/.vst + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc +include /etc/firejail/disable-programs.inc caps.drop all ipc-namespace @@ -27,9 +24,9 @@ noroot seccomp shell none -private-bin sh,ardour5,ardour5-copy-mixer,ardour5-export,ardour5-fix_bbtppq,grep,sed,ldd,nm +#private-bin sh,ardour5,ardour5-copy-mixer,ardour5-export,ardour5-fix_bbtppq,grep,sed,ldd,nm private-dev -private-etc pulse,X11,alternatives,ardour4,ardour5,fonts +#private-etc pulse,X11,alternatives,ardour4,ardour5,fonts private-tmp noexec /home -- cgit v1.2.3-70-g09d2