From 55b200c440fe49e3a2dadb2634025587083f774b Mon Sep 17 00:00:00 2001
From: Tad <tad@spotco.us>
Date: Sun, 30 Jul 2017 17:32:15 -0400
Subject: Partially synchronize Chromium-based profiles

---
 etc/google-chrome.profile | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

(limited to 'etc/google-chrome.profile')

diff --git a/etc/google-chrome.profile b/etc/google-chrome.profile
index 7d27355d2..e6fceadec 100644
--- a/etc/google-chrome.profile
+++ b/etc/google-chrome.profile
@@ -16,9 +16,6 @@ include /etc/firejail/disable-programs.inc
 # include /etc/firejail/disable-devel.inc
 #
 
-caps.keep sys_chroot,sys_admin
-netfilter
-
 whitelist ${DOWNLOADS}
 mkdir ~/.config/google-chrome
 whitelist ~/.config/google-chrome
@@ -28,5 +25,15 @@ mkdir ~/.pki
 whitelist ~/.pki
 include /etc/firejail/whitelist-common.inc
 
+caps.keep sys_chroot,sys_admin
+#ipc-namespace
+netfilter
+nogroups
+shell none
+
+private-dev
+#private-tmp - problems with multiple browser sessions
+#disable-mnt
+
 noexec ${HOME}
 noexec /tmp
-- 
cgit v1.2.3-70-g09d2