diff options
| author | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2021-06-23 00:52:28 -0700 |
|---|---|---|
| committer | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2021-06-23 00:52:28 -0700 |
| commit | 10598a84e62b0c75ae81c87bf06790212ff8c2b0 (patch) | |
| tree | dce1983ce670d0bf1bcf370a1a96db7bddad70d8 /profiles/amfora.profile | |
| parent | Add missing read-writes to mount and blade ii (diff) | |
| download | firejail-profiles-10598a84e62b0c75ae81c87bf06790212ff8c2b0.tar.xz | |
Add profiles for stellaris, cataclysm-bn, cataclysm-bn-tiles, amfora
Diffstat (limited to 'profiles/amfora.profile')
| -rw-r--r-- | profiles/amfora.profile | 56 |
1 files changed, 56 insertions, 0 deletions
diff --git a/profiles/amfora.profile b/profiles/amfora.profile new file mode 100644 index 0000000..d4d6fa8 --- /dev/null +++ b/profiles/amfora.profile @@ -0,0 +1,56 @@ +# Firejail profile for amfora +# This file is overwritten after every install/update +quiet +# Persistent local customizations +include amfora.local +# Persistent global definitions +include globals.local + + +noblacklist ${HOME}/.config/amfora +noblacklist ${HOME}/.local/share/amfora + +blacklist /tmp/.X11-unix +blacklist ${RUNUSER}/wayland-* + +mkdir ${HOME}/.config/amfora +whitelist ${HOME}/.config/amfora +mkdir ${HOME}/.local/share/amfora +whitelist ${HOME}/.local/share/amfora + + +include allow-perl.inc + +include disable-common.inc +include disable-devel.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +include whitelist-runuser-common.inc + +caps.drop all +netfilter +no3d +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol inet,inet6 +seccomp +shell none +tracelog + +private-bin amfora +private-cache +private-dev +private-etc alternatives,ca-certificates,crypto-policies,pki,resolv.conf,ssl +private-tmp + +# # Use with hardened-malloc package +env LD_PRELOAD=/usr/lib/libhardened_malloc.so |