iankelling.org Git - distro-setup/blob - filesystem/etc/firejail/makekitty.profile

   1 private
   2 net none
   3
   4 include globals.local
   5
   6
   7 # below is copied from makepkg
   8
   9 include disable-common.inc
  10 include disable-exec.inc
  11 include disable-passwdmgr.inc
  12 include disable-programs.inc
  13
  14 caps.drop all
  15 ipc-namespace
  16 netfilter
  17 no3d
  18 nodvd
  19 nogroups
  20 nonewprivs
  21 # noroot is only disabled to allow the creation of kernel headers from an official PKGBUILD.
  22 noroot
  23 nosound
  24 notv
  25 novideo
  26 protocol unix,inet,inet6
  27 seccomp
  28 shell none
  29
  30 disable-mnt
  31 private-tmp
  32
  33 memory-deny-write-execute