mirror of
https://github.com/Divested-Mobile/DivestOS-Build.git
synced 2024-12-20 13:24:30 -05:00
Firejail profile has been upstreamed
This commit is contained in:
parent
d8dae7f507
commit
505d7bfbd8
@ -1,44 +0,0 @@
|
||||
# Firejail profile for aosp
|
||||
# This file is overwritten after every install/update
|
||||
# Persistent local customizations
|
||||
include /etc/firejail/aosp.local
|
||||
# Persistent global definitions
|
||||
include /etc/firejail/globals.local
|
||||
|
||||
noblacklist ${HOME}/.android
|
||||
noblacklist ${HOME}/.bash_history
|
||||
noblacklist ${HOME}/.gitconfig
|
||||
noblacklist ${HOME}/.gradle
|
||||
#noblacklist ${HOME}/.jack-server
|
||||
#noblacklist ${HOME}/.jack-settings
|
||||
noblacklist ${HOME}/.java
|
||||
#noblacklist ${HOME}/.repo_.gitconfig.json
|
||||
#noblacklist ${HOME}/.repoconfig
|
||||
noblacklist ${HOME}/.ssh
|
||||
noblacklist ${HOME}/.tooling
|
||||
|
||||
include /etc/firejail/disable-common.inc
|
||||
include /etc/firejail/disable-passwdmgr.inc
|
||||
include /etc/firejail/disable-programs.inc
|
||||
|
||||
include /etc/firejail/whitelist-var-common.inc
|
||||
|
||||
caps.drop all
|
||||
ipc-namespace
|
||||
netfilter
|
||||
no3d
|
||||
nodvd
|
||||
nogroups
|
||||
nonewprivs
|
||||
noroot
|
||||
nosound
|
||||
notv
|
||||
novideo
|
||||
protocol unix,inet,inet6
|
||||
seccomp
|
||||
shell none
|
||||
|
||||
private-tmp
|
||||
|
||||
#noexec ${HOME}
|
||||
#noexec /tmp
|
Loading…
Reference in New Issue
Block a user