# This file is overwritten during software install. # Persistent customizations should go in a .local file. include /etc/firejail/xpra.local # xpra profile include /etc/firejail/disable-common.inc include /etc/firejail/disable-programs.inc include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc caps.drop all netfilter nogroups nonewprivs noroot nosound shell none seccomp protocol unix,inet,inet6 # blacklist /tmp/.X11-unix # private-bin private-dev private-tmp # private-etc