diff --git a/etc/Wire.profile b/etc/Wire.profile index b488d75e4..bd9645c7f 100644 --- a/etc/Wire.profile +++ b/etc/Wire.profile @@ -1,22 +1,3 @@ # wire messenger profile -noblacklist ~/.config/Wire - -include /etc/firejail/disable-common.inc -include /etc/firejail/disable-programs.inc -include /etc/firejail/disable-devel.inc -include /etc/firejail/disable-passwdmgr.inc - -caps.drop all -netfilter -nonewprivs -nogroups -noroot -protocol unix,inet,inet6,netlink -seccomp -shell none - -private-tmp -private-dev - -# please note: the wire binary is currently identified with a capital W. This might change in future versions +include /etc/firejail/wire.profile diff --git a/etc/wire.profile b/etc/wire.profile new file mode 100644 index 000000000..d3fd46b68 --- /dev/null +++ b/etc/wire.profile @@ -0,0 +1,23 @@ +# wire messenger profile + +noblacklist ~/.config/Wire + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc + +caps.drop all +netfilter +nonewprivs +nogroups +noroot +protocol unix,inet,inet6,netlink +seccomp +shell none + +private-tmp +private-dev + +# Note: the current beta version of wire is located in /opt/Wire/wire and therefore not in PATH. +# To use wire with firejail run "firejail /opt/Wire/wire"