From 5dd4748076b6016b0faf0a99485e99a2134b5b06 Mon Sep 17 00:00:00 2001
From: netblue30 <netblue30@yahoo.com>
Date: Fri, 12 Feb 2016 17:55:26 -0500
Subject: added lxterminal profile

---
 etc/lxterminal.profile | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 etc/lxterminal.profile

(limited to 'etc')

diff --git a/etc/lxterminal.profile b/etc/lxterminal.profile
new file mode 100644
index 000000000..a614a8dbf
--- /dev/null
+++ b/etc/lxterminal.profile
@@ -0,0 +1,19 @@
+# lxterminal (LXDE) profile
+
+include /etc/firejail/disable-mgmt.inc
+include /etc/firejail/disable-secret.inc
+include /etc/firejail/disable-common.inc
+blacklist ${HOME}/.pki/nssdb
+blacklist ${HOME}/.lastpass
+blacklist ${HOME}/.keepassx
+blacklist ${HOME}/.password-store
+caps.drop all
+seccomp
+protocol unix,inet,inet6
+netfilter
+
+#noroot - somehow this breaks on Debian Jessie!
+
+# lxterminal is a single-instence program
+# blacklist any existing lxterminal socket in order to force a second process instance
+blacklist /tmp/.lxterminal-socket*
-- 
cgit v1.2.3-54-g00ecf