From ec57c53f7ff036c80324caf5d19e3b3d574f2a19 Mon Sep 17 00:00:00 2001 From: Tad Date: Tue, 11 Jul 2017 16:46:02 -0400 Subject: Add a profile for IntelliJ IDEA and Android Studio --- etc/idea.sh.profile | 37 +++++++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 etc/idea.sh.profile (limited to 'etc/idea.sh.profile') diff --git a/etc/idea.sh.profile b/etc/idea.sh.profile new file mode 100644 index 000000000..771131262 --- /dev/null +++ b/etc/idea.sh.profile @@ -0,0 +1,37 @@ +# Persistent global definitions go here +include /etc/firejail/globals.local + +# This file is overwritten during software install. +# Persistent customizations should go in a .local file. +include /etc/firejail/idea.sh.local + +# Firejail profile for IntelliJ IDEA Community Edition + +noblacklist ${HOME}/.android +noblacklist ${HOME}/.gitconfig +noblacklist ${HOME}/.gradle +noblacklist ${HOME}/.IdeaIC* +noblacklist ${HOME}/.java +noblacklist ${HOME}/.local/share/JetBrains +noblacklist ${HOME}/.ssh +noblacklist ${HOME}/.tooling + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-passwdmgr.inc +include /etc/firejail/disable-programs.inc + +caps.drop all +netfilter +nogroups +nonewprivs +noroot +#nosound +novideo +protocol unix,inet,inet6 +seccomp +shell none + +private-dev +#private-tmp + +noexec /tmp -- cgit v1.2.3-54-g00ecf