From 43c8b14f0a9ab5ed73fc244ae2b0808b544a949a Mon Sep 17 00:00:00 2001 From: Fred-Barclay Date: Fri, 9 Feb 2018 14:38:37 -0600 Subject: Oops - didn't include actual tilp profile. --- etc/tilp.profile | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 etc/tilp.profile (limited to 'etc') diff --git a/etc/tilp.profile b/etc/tilp.profile new file mode 100644 index 000000000..a6165fbfe --- /dev/null +++ b/etc/tilp.profile @@ -0,0 +1,34 @@ +# Firejail profile for tilp +# This file is overwritten after every install/update +# Persistent local customizations +include /etc/firejail/tilp.local +# Persistent global definitions +include /etc/firejail/globals.local + +noblacklist ${HOME}/.tilp + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc +include /etc/firejail/disable-programs.inc + +caps.drop all +net none +nodvd +nogroups +nonewprivs +noroot +notv +novideo +protocol unix,netlink +seccomp +shell none +tracelog + +disable-mnt +private-bin tilp +private-etc fonts +private-tmp + +noexec ${HOME} +noexec /tmp -- cgit v1.2.3-54-g00ecf