diff --git a/roles/browsers/files/firejail/chromium.profile b/roles/browsers/files/firejail/chromium.profile new file mode 100644 index 0000000..d1d9325 --- /dev/null +++ b/roles/browsers/files/firejail/chromium.profile @@ -0,0 +1,6 @@ +include /usr/local/etc/firejail/disable-more.inc +include /etc/firejail/chromium.profile + +# Note that localtime should be added to private-etc if you wish Chromium to be +# able to determine you timezone. +private-etc passwd,group,hostname,hosts,nsswitch.conf,resolv.conf,gtk-2.0,gtk-3.0,fonts,mime.types,asound.conf,pulse diff --git a/roles/browsers/tasks/main.yml b/roles/browsers/tasks/main.yml index 4d6bb1d..797ad47 100644 --- a/roles/browsers/tasks/main.yml +++ b/roles/browsers/tasks/main.yml @@ -34,6 +34,12 @@ - chromium - firejail +- name: Push Chromium firejail profile + copy: src=firejail/chromium.profile dest=/usr/local/etc/firejail/chromium.profile + tags: + - chromium + - firejail + - name: Install Chromium Pepper Flash aur: name=chromium-pepper-flash user={{ user.name }} tags: