From 65c8a6bf66c937ec54690a8339e196a325dc388c Mon Sep 17 00:00:00 2001 From: netblue30 Date: Mon, 23 Mar 2020 14:54:06 -0400 Subject: penguin-commad --- etc/penguin-command.profile | 40 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 40 insertions(+) create mode 100644 etc/penguin-command.profile (limited to 'etc/penguin-command.profile') diff --git a/etc/penguin-command.profile b/etc/penguin-command.profile new file mode 100644 index 000000000..33e0651d4 --- /dev/null +++ b/etc/penguin-command.profile @@ -0,0 +1,40 @@ +# Firejail profile for open-invaders +# Description: Space Invaders clone +# This file is overwritten after every install/update +# Persistent local customizations +include open-invaders.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.penguin-command + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc + +mkdir ${HOME}/.openinvaders +whitelist ${HOME}/.openinvaders +include whitelist-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +net none +nodbus +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +novideo +protocol unix,netlink +seccomp +shell none + +private-bin penguin-command +private-dev +private-tmp -- cgit v1.2.3-70-g09d2