From 89677fc115d7d781bb685642fe93e1bd037b3331 Mon Sep 17 00:00:00 2001 From: startx2017 Date: Mon, 5 Jun 2017 19:16:14 -0400 Subject: handbrake profile --- etc/handbrake.profile | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 etc/handbrake.profile (limited to 'etc/handbrake.profile') diff --git a/etc/handbrake.profile b/etc/handbrake.profile new file mode 100644 index 000000000..0f3f32250 --- /dev/null +++ b/etc/handbrake.profile @@ -0,0 +1,30 @@ +# Persistent global definitions go here +include /etc/firejail/globals.local + +# This file is overwritten during software install. +# Persistent customizations should go in a .local file. +include /etc/firejail/handbrake.local + +noblacklist ~/.config/ghb +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc +include /etc/firejail/disable-passwdmgr.inc + +caps.drop all +netfilter +nonewprivs +noroot +# netlink required! +protocol unix,inet,inet6,netlink +seccomp + +# +# depending on your usage, you can enable some of the commands below: +# +nogroups +shell none +# private-bin program +# private-etc none +#private-dev +private-tmp +nosound -- cgit v1.2.3-54-g00ecf