firejail/etc/devhelp.profile
glitsj16 3f94684661
Streamline mdwe comment (#2769)
* Streamline mdwe comment for authenticator

* Streamline mdwe comment for autokey-common

* Streamline mdwe comment for baobab

* Streamline mwde comment for bitwarden

* Streamline mdwe comment for clawsker

* Streamline mdwe comment for devhelp

* Streamline mdwe comment for d-feet

* Streamline mdwe comment for enpass

* Streamline mdwe comment for eo-common

* Streamline mdwe comment for exfalso

* Streamline mdwe comment for font-manager

* Streamline mdwe comment for geekbench

* Streamline mdwe comment for mpDris2

* Streamline mdwe comment for ocenaudio

* Streamline mdwe comment for QMediathekView

* Streamline mdwe comment for subdownloader

* Streamline mdwe comment for viewnior

* Streamline mdwe comment for youtube-dl
2019-06-13 20:50:38 +00:00

46 lines
888 B
Text

# Firejail profile for devhelp
# Description: API documentation browser for GNOME
# This file is overwritten after every install/update
# Persistent local customizations
include devhelp.local
# Persistent global definitions
include globals.local
include disable-common.inc
include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-passwdmgr.inc
include disable-programs.inc
include disable-xdg.inc
include whitelist-common.inc
apparmor
caps.drop all
# net none - makes settings immutable
# nodbus - makes settings immutable
nodvd
nogroups
nonewprivs
noroot
nosound
notv
nou2f
novideo
protocol unix
seccomp
shell none
tracelog
disable-mnt
private-bin devhelp
private-cache
private-dev
private-etc alternatives,dconf,fonts,ld.so.cache,machine-id,ssl
private-tmp
#memory-deny-write-execute - breaks on Arch (see issue 1803)
read-only ${HOME}