firejail/etc/ssh-agent.profile
rusty-snake 2373fcd74d many profile fixes (1)
- add novideo to a lot of profiles
   (there are still more profiles where novideo can be added)
 - remove commente mdwe from some gnome applications
 - add descriptions to some profiles
 - blacklist ${HOME}/.cargo/credentials
 - move ${HOME}/.git-credentials and ${HOME}/.git-credential-cache to
   'top secret' in disable-common.inc
 - some ordering in disable-programs.inc
 - merge tor browser blacklists to ${HOME}/.tor-browser*
 - qupzilla.profile redirect to falkon.profile
 - blacklist gnome-builder paths
 - fix transmission profiles inlude
 - much more
2019-08-26 00:22:59 +02:00

33 lines
534 B
Text

# Firejail profile for ssh-agent
# This file is overwritten after every install/update
quiet
# Persistent local customizations
include ssh-agent.local
# Persistent global definitions
include globals.local
noblacklist /etc/ssh
noblacklist /tmp/ssh-*
noblacklist ${HOME}/.ssh
blacklist /tmp/.X11-unix
include disable-common.inc
include disable-passwdmgr.inc
include disable-programs.inc
caps.drop all
netfilter
no3d
nodbus
nodvd
nonewprivs
noroot
notv
novideo
protocol unix,inet,inet6
seccomp
shell none
tracelog
writable-run-user