diff options
author | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2020-03-14 23:55:30 -0700 |
---|---|---|
committer | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2020-03-14 23:55:30 -0700 |
commit | 176dae16c44794f30cb347dfd84fe84bcc5c9708 (patch) | |
tree | 3c3b092e9446c01e5613c7596e5fa89277cb1385 /profiles/weechat.local | |
download | firejail-profiles-176dae16c44794f30cb347dfd84fe84bcc5c9708.tar.xz |
Initial commit
Diffstat (limited to 'profiles/weechat.local')
-rw-r--r-- | profiles/weechat.local | 40 |
1 files changed, 40 insertions, 0 deletions
diff --git a/profiles/weechat.local b/profiles/weechat.local new file mode 100644 index 0000000..ca330f7 --- /dev/null +++ b/profiles/weechat.local @@ -0,0 +1,40 @@ +noblacklist ${PATH}/python2* +noblacklist /usr/include/python2* +noblacklist /usr/lib/python2* +noblacklist /usr/local/lib/python2* +noblacklist /usr/share/python2* +noblacklist ${PATH}/python3* +noblacklist /usr/include/python3* +noblacklist /usr/lib/python3* +noblacklist /usr/local/lib/python3* +noblacklist /usr/share/python3* + +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +whitelist ${HOME}/.weechat + +# # alsa audio will work with ipc-namespace, +# # but it hogs the alsa device from other applications +ignore ipc-namespace +machine-id +no3d +nodbus +nodvd +nogroups +# nosound +nou2f +novideo +shell none +tracelog + +disable-mnt +# private-bin +private-dev +private-etc asound.conf,ca-certificates,machine-id,resolv.conf,ssl +private-tmp + +# memory-deny-write-execute |