blob: 412e3176219d688691aaff5a5e67b22a9ad2ada1 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
|
# Firejail profile for i3
# Description: Standards-compliant, fast, light-weight and extensible window manager
# This file is overwritten after every install/update
# Persistent local customizations
include i3.local
# Persistent global definitions
include globals.local
# all applications started in i3 will run in this profile
noblacklist ${HOME}/.config/i3
noblacklist ${RUNUSER}/i3
noblacklist ${RUNUSER}/i3/ipc-socket.*
noblacklist /tmp/i3-*
noblacklist /tmp/i3-*/ipc-socket.*
include disable-common.inc
caps.drop all
netfilter
noroot
protocol unix,inet,inet6
seccomp !chroot
#restrict-namespaces
|