diff options
author | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2022-02-09 13:36:31 -0800 |
---|---|---|
committer | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2022-02-09 13:36:31 -0800 |
commit | c4eff47fbd62d5c9518a6436494881c324b379b8 (patch) | |
tree | 9e0c28b048d67ab58d888c5d33ec326e041b8475 /unmaintained/nyamp.profile | |
parent | Added starsector profile (diff) | |
download | firejail-profiles-c4eff47fbd62d5c9518a6436494881c324b379b8.tar.xz |
Updated for firejail 0.9.68
Diffstat (limited to 'unmaintained/nyamp.profile')
-rw-r--r-- | unmaintained/nyamp.profile | 56 |
1 files changed, 56 insertions, 0 deletions
diff --git a/unmaintained/nyamp.profile b/unmaintained/nyamp.profile new file mode 100644 index 0000000..2b3ffa8 --- /dev/null +++ b/unmaintained/nyamp.profile @@ -0,0 +1,56 @@ +# This file is overwritten after every install/update +# Persistent local customizations +include nyamp.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.config/iserlohn-fortress.net/nyamp +noblacklist ${MUSIC} + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-programs.inc +include disable-shell.inc +include disable-write-mnt.inc +include disable-xdg.inc + +mkdir ${HOME}/.config/iserlohn-fortress.net +mkdir ${HOME}/.config/iserlohn-fortress.net/nyamp + +whitelist ${HOME}/.config/iserlohn-fortress.net/nyamp +whitelist ${MUSIC} +read-only ${MUSIC} +include whitelist-common.inc + + +caps.drop all +# machine-id +net none +no3d +nodvd +nogroups +noinput +nonewprivs +noroot +notv +nou2f +novideo +protocol unix +seccomp +shell none +tracelog + +disable-mnt +private-bin bash,nyamp +private-cache +private-dev +private-etc fonts,machine-id +# private-etc asound.conf,fonts,machine-id,pulse +private-tmp + +memory-deny-write-execute + +dbus-user none +dbus-system none |