firejail/etc/profile-m-z/palemoon.profile
glitsj16 1759055304
profiles: exchange private-opt with a whitelist (#6021)
* profiles: drop private-opt (existing whitelist)

* profiles: replace private-opt with whitelist

In most profiles.

Kept private-opt for enpass (~85MB), mate-dictionary (<20MB),
minecraft-launcher (~1.6MB) and ppsspp (~44MB). The only app I couldn't
check: xmr-stak.

* docs: note potential issues with private-opt
2023-10-18 22:47:07 +00:00

31 lines
893 B
Text

# Firejail profile for palemoon
# This file is overwritten after every install/update
# Persistent local customizations
include palemoon.local
# Persistent global definitions
include globals.local
noblacklist ${HOME}/.cache/moonchild productions/pale moon
noblacklist ${HOME}/.moonchild productions/pale moon
mkdir ${HOME}/.cache/moonchild productions/pale moon
mkdir ${HOME}/.moonchild productions
whitelist ${HOME}/.cache/moonchild productions/pale moon
whitelist ${HOME}/.moonchild productions
whitelist /opt/palemoon
whitelist /usr/share/moonchild productions
whitelist /usr/share/palemoon
# Palemoon can use the full firejail seccomp filter (unlike firefox >= 60)
seccomp
ignore seccomp
#private-bin palemoon
# private-etc must first be enabled in firefox-common.profile
#private-etc palemoon
restrict-namespaces
ignore restrict-namespaces
# Redirect
include firefox-common.profile