From 9e3ba319be6b9546d7e8f450ca419ee2f3f4040b Mon Sep 17 00:00:00 2001 From: Tad Date: Mon, 7 Aug 2017 01:22:08 -0400 Subject: Unify all profiles --- etc/google-chrome-unstable.profile | 35 +++++++++++++++++------------------ 1 file changed, 17 insertions(+), 18 deletions(-) (limited to 'etc/google-chrome-unstable.profile') diff --git a/etc/google-chrome-unstable.profile b/etc/google-chrome-unstable.profile index 0675d7b49..6f4ec9101 100644 --- a/etc/google-chrome-unstable.profile +++ b/etc/google-chrome-unstable.profile @@ -1,39 +1,38 @@ -# Persistent global definitions go here -include /etc/firejail/globals.local - -# This file is overwritten during software install. -# Persistent customizations should go in a .local file. +# Firejail profile for google-chrome-unstable +# This file is overwritten after every install/update +# Persistent local customizations include /etc/firejail/google-chrome-unstable.local +# Persistent global definitions +include /etc/firejail/globals.local -# Google Chrome unstable browser profile -noblacklist ~/.config/google-chrome-unstable noblacklist ~/.cache/google-chrome-unstable +noblacklist ~/.config/google-chrome-unstable noblacklist ~/.pki -include /etc/firejail/disable-common.inc -include /etc/firejail/disable-programs.inc -# chromium is distributed with a perl script on Arch +include /etc/firejail/disable-common.inc # include /etc/firejail/disable-devel.inc -# +include /etc/firejail/disable-programs.inc -whitelist ${DOWNLOADS} -mkdir ~/.config/google-chrome-unstable -whitelist ~/.config/google-chrome-unstable mkdir ~/.cache/google-chrome-unstable -whitelist ~/.cache/google-chrome-unstable +mkdir ~/.config/google-chrome-unstable mkdir ~/.pki +whitelist ${DOWNLOADS} +whitelist ~/.cache/google-chrome-unstable +whitelist ~/.config/google-chrome-unstable whitelist ~/.pki include /etc/firejail/whitelist-common.inc caps.keep sys_chroot,sys_admin -#ipc-namespace netfilter nogroups shell none private-dev -#private-tmp - problems with multiple browser sessions -#disable-mnt +# private-tmp - problems with multiple browser sessions noexec ${HOME} noexec /tmp + +# CLOBBERED COMMENTS +# chromium is distributed with a perl script on Arch +# disable-mnt -- cgit v1.2.3-54-g00ecf