From de50467a2f179ead04a9403033f2dafdcb284865 Mon Sep 17 00:00:00 2001 From: Silvio Rhatto Date: Sat, 16 Sep 2017 20:18:39 -0300 Subject: Adds custom git profile --- config.dot/firejail/git.profile.link | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 config.dot/firejail/git.profile.link diff --git a/config.dot/firejail/git.profile.link b/config.dot/firejail/git.profile.link new file mode 100644 index 0000000..1521c6b --- /dev/null +++ b/config.dot/firejail/git.profile.link @@ -0,0 +1,33 @@ +# git profile +quiet +noblacklist ~/.gitconfig +noblacklist ~/.ssh +noblacklist ~/.gnupg +noblacklist ~/.emacs +noblacklist ~/.emacs.d +noblacklist ~/.viminfo +noblacklist ~/.vim + +# custom +noblacklist ~/.custom/gitconfig +noblacklist ${PATH}/nc +noblacklist /tmp/ssh-* + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc +include /etc/firejail/disable-passwdmgr.inc + +# allow git to work with dotfiles +read-write ${HOME}/.dotfiles + +caps.drop all +netfilter +nonewprivs +noroot +nogroups +nosound +protocol unix,inet,inet6 +seccomp +shell none + +private-dev -- cgit v1.2.3