summaryrefslogtreecommitdiff
path: root/.config/firejail/hexographer.profile
diff options
context:
space:
mode:
authorSean Whitton <spwhitton@spwhitton.name>2022-11-25 15:10:16 -0700
committerSean Whitton <spwhitton@spwhitton.name>2022-11-25 15:11:03 -0700
commit639bdb74e607c1d3c48a775ffe6b889103e1f1dd (patch)
tree5456ef40cbc47900c29cfce5630476eecea7b88b /.config/firejail/hexographer.profile
parent03a46b352842a2b77cc7f2a159eb794d1079bc00 (diff)
downloaddotfiles-639bdb74e607c1d3c48a775ffe6b889103e1f1dd.tar.gz
archive some unused configuration
Diffstat (limited to '.config/firejail/hexographer.profile')
-rw-r--r--.config/firejail/hexographer.profile50
1 files changed, 0 insertions, 50 deletions
diff --git a/.config/firejail/hexographer.profile b/.config/firejail/hexographer.profile
deleted file mode 100644
index 39f0ffee..00000000
--- a/.config/firejail/hexographer.profile
+++ /dev/null
@@ -1,50 +0,0 @@
-# Firejail profile for hexographer, based on upstream profile for
-# terasology
-
-include /etc/firejail/globals.local
-
-noblacklist ${HOME}/.java
-
-include /etc/firejail/disable-common.inc
-include /etc/firejail/disable-devel.inc
-include /etc/firejail/disable-passwdmgr.inc
-include /etc/firejail/disable-programs.inc
-
-mkdir ${HOME}/.java
-
-whitelist ~/.fonts
-whitelist ~/.fonts.d
-whitelist ~/.fontconfig
-whitelist ~/.fonts.conf
-whitelist ~/.fonts.conf.d
-
-whitelist ${HOME}/.java
-whitelist ${HOME}/lib/annex/.git/annex/objects
-read-only ${HOME}/lib/annex/.git/annex/objects
-whitelist ${HOME}/lib/annex/big/software
-read-only ${HOME}/lib/annex/big/software
-# following will require `git annex unlock`
-whitelist ${HOME}/lib/annex/doc/gaming
-include /etc/firejail/whitelist-common.inc
-
-caps.drop all
-ipc-namespace
-net none
-netfilter
-nodvd
-nogroups
-nonewprivs
-noroot
-notv
-novideo
-protocol unix,inet,inet6
-seccomp
-shell none
-
-disable-mnt
-private-dev
-# following causes hexographer to use ~/?/.java instead of ~/.java
-#private-etc profile,fonts,alternatives,java-9-openjdk,java-8-openjdk,java-7-openjdk
-private-tmp
-
-noexec ${HOME}