From 0f1b7e5ebf3092cc0de52fc84cc5d3c512913093 Mon Sep 17 00:00:00 2001
From: Tad <tad@spotco.us>
Date: Thu, 3 Aug 2017 21:56:03 -0400
Subject: Add 12 new profiles

apktool, Baobab, dex2jar, gitg, Hashcat, MusicBrainz Picard, OBS Studio, Remmina, sdat2img, Sound Converter, SQLiteBrowser, Truecraft
---
 etc/truecraft.profile | 37 +++++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 etc/truecraft.profile

(limited to 'etc/truecraft.profile')

diff --git a/etc/truecraft.profile b/etc/truecraft.profile
new file mode 100644
index 000000000..20435c30f
--- /dev/null
+++ b/etc/truecraft.profile
@@ -0,0 +1,37 @@
+# Persistent global definitions go here
+include /etc/firejail/globals.local
+
+# This file is overwritten during software install.
+# Persistent customizations should go in a .local file.
+include /etc/firejail/truecraft.local
+
+# Firejail profile for TrueCraft
+noblacklist ${HOME}/.config/mono
+noblacklist ${HOME}/.config/truecraft
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+include /etc/firejail/disable-programs.inc
+
+mkdir ${HOME}/.config/mono
+whitelist ${HOME}/.config/mono
+mkdir ${HOME}/.config/truecraft
+whitelist ${HOME}/.config/truecraft
+include /etc/firejail/whitelist-common.inc
+
+caps.drop all
+nogroups
+nonewprivs
+noroot
+novideo
+protocol unix,inet,inet6
+seccomp
+shell none
+
+disable-mnt
+private-dev
+private-tmp
+
+noexec ${HOME}
+noexec /tmp
-- 
cgit v1.2.3-54-g00ecf