From 6e23a6dd6367ad8240601a5fc32fb75ce5f64e07 Mon Sep 17 00:00:00 2001 From: SYN-cook Date: Mon, 3 Apr 2017 23:28:50 +0200 Subject: mediathekview profile (#1190) * create mediathekview.profile * update mediathekview * update mediathekview * blacklist mediathekview * add mediathekview * add mediathekview --- etc/mediathekview.profile | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 etc/mediathekview.profile (limited to 'etc/mediathekview.profile') diff --git a/etc/mediathekview.profile b/etc/mediathekview.profile new file mode 100644 index 000000000..ec5b507ae --- /dev/null +++ b/etc/mediathekview.profile @@ -0,0 +1,25 @@ +# This file is overwritten during software install. +# Persistent customizations should go in a .local file. +include /etc/firejail/mediathekview.local + +# MediathekView profile +noblacklist ~/.mediathek3 +noblacklist ~/.config/vlc +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc + +caps.drop all +netfilter +nonewprivs +noroot +protocol unix,inet,inet6 +seccomp +tracelog + +noexec ${HOME} +noexec /tmp + +private-dev +private-tmp -- cgit v1.2.3-54-g00ecf