diff --git a/etc/spotify.profile b/etc/spotify.profile new file mode 100644 index 000000000..3b2360a65 --- /dev/null +++ b/etc/spotify.profile @@ -0,0 +1,19 @@ +# Spotify profile +include /etc/firejail/disable-mgmt.inc +include /etc/firejail/disable-secret.inc +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-history.inc + +# Whitelist the folders needed by Spotify - This is more restrictive +# than a blacklist though, but this is all spotify requires for +# streaming audio +whitelist ${HOME}/.config/spotify +whitelist ${HOME}/.local/share/spotify +whitelist ${HOME}/.cache/spotify +# Whitelist the pulseaudio config, to allow PulseAudio workaround (Issue #69) +whitelist ${HOME}/.config/pulse + +caps.drop all +seccomp +netfilter +noroot