diff --git a/weechat/.config/firejail/weechat.profile b/weechat/.config/firejail/weechat.profile new file mode 100644 index 0000000..02ff503 --- /dev/null +++ b/weechat/.config/firejail/weechat.profile @@ -0,0 +1,16 @@ +# Weechat IRC profile +noblacklist ${HOME}/.weechat +noblacklist ${HOME}/.config/qutebrowser +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc + +caps.drop all +netfilter +nonewprivs +noroot +protocol unix,inet,inet6 +seccomp + +# no private-bin support for various reasons: +# Plugins loaded: alias, aspell, charset, exec, fifo, guile, irc, +# logger, lua, perl, python, relay, ruby, script, tcl, trigger, xferloading plugins