# qemu-launcher profile noblacklist ~/.qemu-launcher include /etc/firejail/disable-common.inc include /etc/firejail/disable-programs.inc include /etc/firejail/disable-passwdmgr.inc caps.drop all netfilter nogroups nonewprivs noroot protocol unix,inet,inet6 seccomp shell none tracelog private-tmp