From 1c7908327f07268e77c2a554a20e633af7fed4ce Mon Sep 17 00:00:00 2001
From: Robert Günzler <r@gnzler.io>
Date: Fri, 18 Nov 2022 18:36:13 +0100
Subject: commit firejail stuff

---
 .config/firejail/discord.local | 40 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 .config/firejail/discord.local

(limited to '.config/firejail/discord.local')

diff --git a/.config/firejail/discord.local b/.config/firejail/discord.local
new file mode 100644
index 0000000..15b3ef9
--- /dev/null
+++ b/.config/firejail/discord.local
@@ -0,0 +1,40 @@
+
+include x11fy.inc
+
+dbus-user filter
+dbus-user.talk org.freedesktop.Notifications
+dbus-user.talk org.freedesktop.portal.*
+dbus-system none
+
+#ignore nogroups
+
+# we want webcam
+ignore novideo
+# can't do anything without network
+ignore net none
+# TODO is this needed?
+# ignore memory-deny-write-execute
+
+#ignore apparmor
+#ignore noexec ${HOME}
+
+whitelist ${HOME}/.config/discord
+whitelist ${HOME}/.gtkrc-2.0
+whitelist ${HOME}/.themes
+#whitelist ${DOWNLOADS}
+
+# appindicator breaks without this
+# ignore private-tmp
+
+# hide a bunch of stuff
+# blacklist /tmp/wl-copy*
+# blacklist /tmp/nvim*
+# blacklist /tmp/go-build*
+# blacklist /tmp/gopls*
+# blacklist /tmp/lua-language-server*
+# blacklist /tmp/ssh*
+# blacklist /tmp/waybar*
+# blacklist /tmp/sway*
+# blacklist /tmp/keepass*
+# blacklist /tmp/fzf-interactive*
+
-- 
cgit 1.4.1