# atool profile include /etc/firejail/disable-common.inc include /etc/firejail/disable-programs.inc # include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc caps.drop all nogroups nonewprivs noroot nosound protocol unix seccomp netfilter net none shell none tracelog # private-bin atool private-tmp private-dev private-etc none