# git profile
quiet
noblacklist ~/.gitconfig
noblacklist ~/.ssh
noblacklist ~/.gnupg
noblacklist ~/.emacs
noblacklist ~/.emacs.d
noblacklist ~/.viminfo
noblacklist ~/.vim

# allow git to work with some other configs
noblacklist ${HOME}/.config/autostart
noblacklist ${HOME}/.mutt
noblacklist ${HOME}/.muttrc
noblacklist /etc/ssh

# custom
noblacklist ~/.custom/gitconfig
noblacklist ${PATH}/nc
noblacklist /tmp/ssh-*
noblacklist ~/.subversion

include /etc/firejail/disable-common.inc
include /etc/firejail/disable-programs.inc

# allow write operations in non-default folders
include whitelist-common.local

# allow git to work with dotfiles
read-write ${HOME}/.dotfiles

caps.drop all
netfilter
nonewprivs
noroot
nogroups
nosound
protocol unix,inet,inet6
seccomp
shell none

private-dev