# Firejail profile for hexchat # Description: IRC client for X based on X-Chat 2 # This file is overwritten after every install/update # Persistent local customizations include hexchat.local # Persistent global definitions include globals.local noblacklist ${HOME}/.config/hexchat # Allow /bin/sh (blacklisted by disable-shell.inc) include allow-bin-sh.inc # Allow perl (blacklisted by disable-interpreters.inc) include allow-perl.inc # Allow python (blacklisted by disable-interpreters.inc) include allow-python2.inc include allow-python3.inc include disable-common.inc include disable-devel.inc include disable-exec.inc include disable-interpreters.inc include disable-programs.inc include disable-shell.inc include disable-xdg.inc mkdir ${HOME}/.config/hexchat whitelist ${HOME}/.config/hexchat include whitelist-common.inc include whitelist-var-common.inc caps.drop all #machine-id -- breaks sound netfilter no3d nodvd nogroups noinput nonewprivs noroot notv nou2f novideo protocol unix,inet,inet6 seccomp tracelog disable-mnt # debug note: private-bin requires perl, python, etc on some systems private-bin hexchat,python*,sh private-dev #private-lib - python problems private-tmp # memory-deny-write-execute - breaks python