| 123456789101112131415161718192021222324252627282930 |
- # Firejail profile for Mozilla Firefox (Iceweasel in Debian)
- noblacklist ~/.mozilla
- noblacklist ~/.cache/mozilla
- include /etc/firejail/disable-common.inc
- include /etc/firejail/disable-programs.inc
- include /etc/firejail/disable-devel.inc
- caps.drop all
- netfilter
- nonewprivs
- noroot
- protocol unix,inet,inet6,netlink
- seccomp
- tracelog
- whitelist ${DOWNLOADS}
- mkdir ~/MozInbox
- whitelist ~/MozInbox
- mkdir ~/.mozilla
- whitelist ~/.mozilla
- mkdir ~/.cache/mozilla/firefox
- whitelist ~/.cache/mozilla/firefox
- whitelist ~/dwhelper
- whitelist ~/.pki
- include /etc/firejail/whitelist-common.inc
- # experimental features
- #private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse
|
