aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/i3.profile
blob: 412e3176219d688691aaff5a5e67b22a9ad2ada1 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
# Firejail profile for i3
# Description: Standards-compliant, fast, light-weight and extensible window manager
# This file is overwritten after every install/update
# Persistent local customizations
include i3.local
# Persistent global definitions
include globals.local

# all applications started in i3 will run in this profile
noblacklist ${HOME}/.config/i3
noblacklist ${RUNUSER}/i3
noblacklist ${RUNUSER}/i3/ipc-socket.*
noblacklist /tmp/i3-*
noblacklist /tmp/i3-*/ipc-socket.*
include disable-common.inc

caps.drop all
netfilter
noroot
protocol unix,inet,inet6
seccomp !chroot

#restrict-namespaces