firejail/etc/profile-m-z/slashem.profile
Kelvin M. Klann fe64b62f21 profiles: split commands that increase/reduce access (profiles)
Command used to search for the relevant profiles:

    git grep -El 'allow-debuggers|allusers|keep-|writable-' -- etc
2025-03-26 16:23:46 -03:00

48 lines
822 B
Text

# Firejail profile for slashem
# Description: A rogue-like single player dungeon exploration game
# This file is overwritten after every install/update
# Persistent local customizations
include slashem.local
# Persistent global definitions
include globals.local
noblacklist /var/games/slashem
include disable-common.inc
include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
whitelist /var/games/slashem
include whitelist-common.inc
include whitelist-var-common.inc
writable-var
caps.drop all
ipc-namespace
net none
no3d
nodvd
nogroups
noinput
#nonewprivs
#noroot
nosound
notv
novideo
#protocol unix,netlink
#seccomp
disable-mnt
#private
private-cache
private-dev
private-tmp
dbus-user none
dbus-system none
#memory-deny-write-execute
#restrict-namespaces