mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-21 06:45:29 -06:00
New profile: mimetype.profile (#6247)
Description: Determines the file type. https://metacpan.org/release/File-MimeInfo https://archlinux.org/packages/extra/any/perl-file-mimeinfo/
This commit is contained in:
parent
898273ac8e
commit
161318dc2b
1 changed files with 48 additions and 0 deletions
48
etc/profile-m-z/mimetype.profile
Normal file
48
etc/profile-m-z/mimetype.profile
Normal file
|
|
@ -0,0 +1,48 @@
|
|||
# Firejail profile for mimetype
|
||||
# Description: Determines the file type
|
||||
# This file is overwritten after every install/update
|
||||
quiet
|
||||
# Persistent local customizations
|
||||
include mimetype.local
|
||||
# Persistent global definitions
|
||||
include globals.local
|
||||
|
||||
blacklist /tmp/.X11-unix
|
||||
blacklist ${RUNUSER}/wayland-*
|
||||
|
||||
include disable-exec.inc
|
||||
include disable-proc.inc
|
||||
|
||||
apparmor
|
||||
caps.drop all
|
||||
ipc-namespace
|
||||
machine-id
|
||||
net none
|
||||
no3d
|
||||
nodvd
|
||||
nogroups
|
||||
noinput
|
||||
nonewprivs
|
||||
noprinters
|
||||
noroot
|
||||
nosound
|
||||
notv
|
||||
nou2f
|
||||
novideo
|
||||
protocol unix
|
||||
seccomp
|
||||
seccomp.block-secondary
|
||||
tracelog
|
||||
x11 none
|
||||
|
||||
private-dev
|
||||
|
||||
dbus-user none
|
||||
dbus-system none
|
||||
|
||||
memory-deny-write-execute
|
||||
read-only ${HOME}
|
||||
read-only ${RUNUSER}
|
||||
read-only /tmp
|
||||
|
||||
restrict-namespaces
|
||||
Loading…
Add table
Add a link
Reference in a new issue