mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-21 06:45:29 -06:00
Refactor min as chromium redirect profile (#2676)
This commit is contained in:
parent
c813294e47
commit
ad31bb726b
1 changed files with 2 additions and 41 deletions
|
|
@ -8,47 +8,8 @@ include globals.local
|
|||
|
||||
noblacklist ${HOME}/.config/Min
|
||||
|
||||
noblacklist ${HOME}/.pki
|
||||
noblacklist ${HOME}/.local/share/pki
|
||||
|
||||
# noexec ${HOME} breaks DRM binaries.
|
||||
?BROWSER_ALLOW_DRM: ignore noexec ${HOME}
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
include disable-exec.inc
|
||||
include disable-interpreters.inc
|
||||
include disable-programs.inc
|
||||
|
||||
mkdir ${HOME}/.pki
|
||||
mkdir ${HOME}/.config/Min
|
||||
mkdir ${HOME}/.local/share/pki
|
||||
whitelist ${DOWNLOADS}
|
||||
whitelist ${HOME}/.pki
|
||||
whitelist ${HOME}/.config/Min
|
||||
whitelist ${HOME}/.local/share/pki
|
||||
include whitelist-common.inc
|
||||
include whitelist-var-common.inc
|
||||
|
||||
caps.drop all
|
||||
netfilter
|
||||
nodbus
|
||||
nodvd
|
||||
nogroups
|
||||
nonewprivs
|
||||
noroot
|
||||
notv
|
||||
nou2f
|
||||
protocol unix,inet,inet6
|
||||
seccomp
|
||||
shell none
|
||||
|
||||
disable-mnt
|
||||
# private-bin min
|
||||
private-cache
|
||||
private-dev
|
||||
# private-etc below works fine on most distributions. There are some problems on CentOS.
|
||||
private-etc alternatives,ca-certificates,ssl,machine-id,dconf,selinux,passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,xdg,gtk-2.0,gtk-3.0,X11,pango,fonts,mime.types,mailcap,asound.conf,pulse,pki,crypto-policies,ld.so.cache
|
||||
private-tmp
|
||||
|
||||
# memory-deny-write-execute
|
||||
# Redirect
|
||||
include chromium-common.profile
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue