diff options
Diffstat (limited to 'profiles/rtv.profile')
| -rw-r--r-- | profiles/rtv.profile | 58 |
1 files changed, 58 insertions, 0 deletions
diff --git a/profiles/rtv.profile b/profiles/rtv.profile new file mode 100644 index 0000000..c10cc15 --- /dev/null +++ b/profiles/rtv.profile @@ -0,0 +1,58 @@ +# This file is overwritten after every install/update +# Persistent local customizations +include rtv.local +# Persistent global definitions +include globals.local + +blacklist /tmp/.X11-unix + +noblacklist ${PATH}/python2* +noblacklist /usr/include/python2* +noblacklist /usr/lib/python2* +noblacklist /usr/local/lib/python2* +noblacklist /usr/share/python2* +noblacklist ${PATH}/python3* +noblacklist /usr/include/python3* +noblacklist /usr/lib/python3* +noblacklist /usr/local/lib/python3* +noblacklist /usr/share/python3* +noblacklist ${HOME}/.config/rtv + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +mkdir ${HOME}/.config/rtv +whitelist ${HOME}/.config/rtv + +caps.drop all +ipc-namespace +machine-id +netfilter +no3d +nodbus +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol inet,inet6 +seccomp +shell none +tracelog + +disable-mnt +# private-bin rtv,python +private-cache +private-dev +private-etc ca-certificates,resolv.conf,ssl +private-tmp + +# memory-deny-write-execute |