Mirrors/spark
1
0
Fork 0
mirror of https://github.com/pigmonkey/spark.git synced 2026-01-23 02:24:09 +00:00
Code Issues Projects Releases Wiki Activity

jail ncmpcpp

Browse source
This commit is contained in:
Pig Monkey 2016-03-31 20:28:07 -07:00
parent b6bcff0265
commit f5e6e6b373
2 changed files with 26 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

14
roles/mpd/files/firejail/ncmpcpp.profile Normal file
View file

@ -0,0 +1,14 @@
include /etc/firejail/disable-mgmt.inc
include /etc/firejail/disable-secret.inc
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
caps.drop all
seccomp
protocol unix,inet,inet6
netfilter
noroot
nogroups
whitelist ~/.ncmpcpp
whitelist ~/audio

12
roles/mpd/tasks/main.yml
View file

@ -31,3 +31,15 @@
- name: Install ncmpcpp
pacman: name=ncmpcpp state=present
- name: Jail ncmpcpp
file: src=/usr/bin/firejail
dest=/usr/local/bin/ncmpcpp
state=link
tags:
- firejail
- name: Push ncmpcpp firejail profile
copy: src=firejail/ncmpcpp.profile dest=/usr/local/etc/firejail/ncmpcpp.profile
tags:
- firejail