From 55b200c440fe49e3a2dadb2634025587083f774b Mon Sep 17 00:00:00 2001
From: Tad <tad@spotco.us>
Date: Sun, 30 Jul 2017 17:32:15 -0400
Subject: Partially synchronize Chromium-based profiles

---
 etc/google-chrome-unstable.profile | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

(limited to 'etc/google-chrome-unstable.profile')

diff --git a/etc/google-chrome-unstable.profile b/etc/google-chrome-unstable.profile
index 860e2488a..0675d7b49 100644
--- a/etc/google-chrome-unstable.profile
+++ b/etc/google-chrome-unstable.profile
@@ -16,8 +16,6 @@ include /etc/firejail/disable-programs.inc
 # include /etc/firejail/disable-devel.inc
 #
 
-netfilter
-
 whitelist ${DOWNLOADS}
 mkdir ~/.config/google-chrome-unstable
 whitelist ~/.config/google-chrome-unstable
@@ -27,5 +25,15 @@ mkdir ~/.pki
 whitelist ~/.pki
 include /etc/firejail/whitelist-common.inc
 
+caps.keep sys_chroot,sys_admin
+#ipc-namespace
+netfilter
+nogroups
+shell none
+
+private-dev
+#private-tmp - problems with multiple browser sessions
+#disable-mnt
+
 noexec ${HOME}
 noexec /tmp
-- 
cgit v1.2.3-70-g09d2