etc/profile-m-z/nvim.profile


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

# Firejail profile for neovim                                                                                                                                                                                           
# Description: Nvim is open source and freely distributable
# This file is overwritten after every install/update                                                                                                                                                                
# Persistent local customizations                                                                                                                                                                                    
include nvim.local                                                                                                                                                                                                    
# Persistent global definitions                                                                                                                                                                                      
include globals.local 

noblacklist ${HOME}/.vim                                                                                                                                                                                             
                                                                                                                                                                                                                     
include disable-common.inc                                                                                                                                                                                           
include disable-programs.inc                                                                                                                                                                                         
include disable-devel.inc                                                                                                                                                                                            
include disable-passwdmgr.inc                                                                                                                                                                                        
include disable-xdg.inc                                                                                                                                                                                              
include disable-write-mnt.inc                                                                                                                                                                                        
include whitelist-runuser-common.inc                                                                                                                                                                                 

# Allows files commonly used by IDEs                                                                                                                                                                                 
include allow-common-devel.inc                                                                                                                                                                                       
                                                                                                                                                                                                                     
caps.drop all                                                                                                                                                                                                        
netfilter                                                                                                                                                                                                            
nodbus                                                                                                                                                                                                               
nodvd                                                                                                                                                                                                                
nogroups                                                                                                                                                                                                             
noinput                                                                                                                                                                                                              
nonewprivs                                                                                                                                                                                                           
noroot                                                                                                                                                                                                               
notv                                                                                                                                                                                                                 
nou2f                                                                                                                                                                                                                
novideo                                                                                                                                                                                                              
protocol unix,inet,inet6                                                                                                                                                                                             
seccomp                                                                                                                                                                                                              
                                                                                                                                                                                                                     
private-dev                                                                                                                                                                                                          
                                                                                                                                                                                                                     
read-write ${HOME}/.vim
read-only ${HOME}/.config