51 lines
1.4 KiB
Plaintext
51 lines
1.4 KiB
Plaintext
# Firejail profile for virtualbox
|
|
# Description: x86 virtualization solution
|
|
# This file is overwritten after every install/update
|
|
# Persistent local customizations
|
|
include virtualbox.local
|
|
# Persistent global definitions
|
|
include globals.local
|
|
|
|
noblacklist ${HOME}/.VirtualBox
|
|
noblacklist ${HOME}/.config/VirtualBox
|
|
noblacklist ${HOME}/VirtualBox VMs
|
|
# noblacklist /usr/bin/virtualbox
|
|
noblacklist /usr/lib/virtualbox
|
|
noblacklist /usr/lib64/virtualbox
|
|
|
|
include disable-common.inc
|
|
include disable-devel.inc
|
|
include disable-exec.inc
|
|
include disable-interpreters.inc
|
|
include disable-passwdmgr.inc
|
|
include disable-programs.inc
|
|
include disable-xdg.inc
|
|
|
|
mkdir ${HOME}/.config/VirtualBox
|
|
mkdir ${HOME}/VirtualBox VMs
|
|
whitelist ${HOME}/.config/VirtualBox
|
|
whitelist ${HOME}/VirtualBox VMs
|
|
whitelist ${DOWNLOADS}
|
|
whitelist /usr/share/virtualbox
|
|
include whitelist-common.inc
|
|
include whitelist-runuser-common.inc
|
|
include whitelist-usr-share-common.inc
|
|
include whitelist-var-common.inc
|
|
|
|
# For host-only network sys_admin is needed. See https://github.com/netblue30/firejail/issues/2868#issuecomment-518647630
|
|
|
|
caps.keep net_raw,sys_nice
|
|
netfilter
|
|
nodvd
|
|
#nogroups
|
|
notv
|
|
shell none
|
|
tracelog
|
|
|
|
#disable-mnt
|
|
private-cache
|
|
private-etc alsa,asound.conf,ca-certificates,conf.d,crypto-policies,dconf,fonts,hostname,hosts,ld.so.cache,localtime,machine-id,pki,pulse,resolv.conf,ssl
|
|
|
|
dbus-user none
|
|
dbus-system none
|