From 9e3ba319be6b9546d7e8f450ca419ee2f3f4040b Mon Sep 17 00:00:00 2001 From: Tad Date: Mon, 7 Aug 2017 01:22:08 -0400 Subject: Unify all profiles --- etc/qupzilla.profile | 33 +++++++++++++++++---------------- 1 file changed, 17 insertions(+), 16 deletions(-) (limited to 'etc/qupzilla.profile') diff --git a/etc/qupzilla.profile b/etc/qupzilla.profile index 5dfeeb281..6d0c16785 100644 --- a/etc/qupzilla.profile +++ b/etc/qupzilla.profile @@ -1,27 +1,28 @@ -# Persistent global definitions go here -include /etc/firejail/globals.local - -# This file is overwritten during software install. -# Persistent customizations should go in a .local file. +# Firejail profile for qupzilla +# This file is overwritten after every install/update +# Persistent local customizations include /etc/firejail/qupzilla.local +# Persistent global definitions +include /etc/firejail/globals.local -# Firejail profile for Qupzilla web browser -noblacklist ${HOME}/.config/qupzilla noblacklist ${HOME}/.cache/qupzilla +noblacklist ${HOME}/.config/qupzilla + include /etc/firejail/disable-common.inc include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc include /etc/firejail/disable-programs.inc -caps.drop all -seccomp -protocol unix,inet,inet6,netlink -netfilter -tracelog -noroot + whitelist ${DOWNLOADS} -whitelist ~/.config/qupzilla whitelist ~/.cache/qupzilla +whitelist ~/.config/qupzilla include /etc/firejail/whitelist-common.inc -# experimental features -#private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse +caps.drop all +netfilter +noroot +protocol unix,inet,inet6,netlink +seccomp +tracelog + +# private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse -- cgit v1.2.3-54-g00ecf