Mirrors/spark
1
0
Fork 0
mirror of https://github.com/pigmonkey/spark.git synced 2026-01-23 02:24:09 +00:00
Code Issues Projects Releases Wiki Activity

use default firejail mpd profile

Browse source 
requires >= 0.9.52
This commit is contained in:
Pig Monkey 2017-12-26 16:39:41 -08:00
parent 632c8ec549
commit d9cd95e9fa
2 changed files with 10 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

11
roles/mpd/files/firejail/mpd.profile
View file

@ -1,11 +0,0 @@
include /etc/firejail/globals.local
include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-programs.inc
include /etc/firejail/disable-passwdmgr.inc
caps.drop all
netfilter
nonewprivs
noroot
protocol unix,inet,inet6,netlink

14
roles/mpd/tasks/main.yml
View file

@ -9,10 +9,16 @@
tags:
- firejail
- name: Push mpd firejail profile
copy: src=firejail/mpd.profile dest=/usr/local/etc/firejail/mpd.profile
notify:
- activate firejail profiles
- name: Verify mpd firejail local profile exists
file: path=/etc/firejail/mpd.local state=touch
tags:
- firejail
- name: Set mpd firejail protocols
lineinfile:
dest: /etc/firejail/mpd.local
regexp: "^protocol"
line: "protocol unix,inet,inet6,netlink"
tags:
- firejail