From 5ce8a913a4eca3e3e0b23cf1931bbfae7cb3ae9d Mon Sep 17 00:00:00 2001 From: netblue30 Date: Fri, 15 Apr 2016 08:29:50 -0400 Subject: merged 0ad profile from Fred-Barclay --- etc/0ad.profile | 30 ++++++++++++++++++++++++++++++ etc/disable-programs.inc | 3 +++ 2 files changed, 33 insertions(+) create mode 100644 etc/0ad.profile (limited to 'etc') diff --git a/etc/0ad.profile b/etc/0ad.profile new file mode 100644 index 000000000..f8a3ce23d --- /dev/null +++ b/etc/0ad.profile @@ -0,0 +1,30 @@ +# Firejail profile for 0ad. +noblacklist ~/.config/0ad +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc +include /etc/firejail/disable-programs.inc + +# Call these options +caps.drop all +seccomp +protocol unix,inet,inet6,netlink +netfilter +tracelog +noroot + +# Whitelists +noblacklist ~/.cache/0ad +mkdir ~/.cache +mkdir ~/.cache/0ad +whitelist ~/.cache/0ad + +mkdir ~/.config +mkdir ~/.config/0ad +whitelist ~/.config/0ad + +noblacklist ~/.local/share/0ad +mkdir ~/.local +mkdir ~/.local/share +mkdir ~/.local/share/0ad +whitelist ~/.local/share/0ad diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 7faf75638..7f18aa16f 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -53,6 +53,7 @@ blacklist ${HOME}/.TelegramDesktop blacklist ${HOME}/.hedgewars blacklist ${HOME}/.steam blacklist ${HOME}/.config/wesnoth +blacklist ${HOME}/.config/0ad # Cryptocoins blacklist ${HOME}/.*coin @@ -81,6 +82,7 @@ blacklist ${HOME}/.cache/thunderbird blacklist ${HOME}/.cache/icedove blacklist ${HOME}/.cache/transmission blacklist ${HOME}/.cache/wesnoth +blacklist ${HOME}/.cache/0ad # share blacklist ${HOME}/.local/share/epiphany @@ -88,3 +90,4 @@ blacklist ${HOME}/.local/share/mupen64plus blacklist ${HOME}/.local/share/spotify blacklist ${HOME}/.local/share/steam blacklist ${HOME}/.local/share/wesnoth +blacklist ${HOME}/.local/share/0ad -- cgit v1.2.3-54-g00ecf