diff options
| author | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2020-10-18 20:54:47 -0700 |
|---|---|---|
| committer | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2020-10-18 20:54:47 -0700 |
| commit | 6ea485a808c1bc86cdbff55b99b5e5e9e03ab65b (patch) | |
| tree | 5856536d3208d494856509915436610b4c5c679b /profiles/vlc.local | |
| parent | Fix bannerlord profile (diff) | |
| download | firejail-profiles-6ea485a808c1bc86cdbff55b99b5e5e9e03ab65b.tar.xz | |
Updated for firejail 0.9.64-rc1
Diffstat (limited to 'profiles/vlc.local')
| -rw-r--r-- | profiles/vlc.local | 22 |
1 files changed, 16 insertions, 6 deletions
diff --git a/profiles/vlc.local b/profiles/vlc.local index ed7d779..d7094d9 100644 --- a/profiles/vlc.local +++ b/profiles/vlc.local @@ -1,17 +1,27 @@ ignore noblacklist ${HOME}/.cache/vlc +noblacklist ${MUSIC} +noblacklist ${PICTURES} +noblacklist ${VIDEOS} + +include disable-xdg.inc + +whitelist ${MUSIC} +whitelist ${PICTURES} +whitelist ${VIDEOS} + +read-only ${DOWNLOADS} +read-only ${MUSIC} +read-only ${PICTURES} +read-only ${VIDEOS} # # alsa audio will work with ipc-namespace, # # but it hogs the alsa device from other applications ignore ipc-namespace -nodbus # # seccomp breaks integrated file manager on kde applications # # due to syscall name_to_handle_at # # kcmp syscall requied by amdgpu hardware acceleration seccomp !name_to_handle_at,!kcmp -read-only ${DOWNLOADS} -read-only ${MUSIC} -noblacklist ${PICTURES} -read-only ${PICTURES} -read-only ${VIDEOS} +dbus-user none +dbus-system none |