Feat: firejail profile

diff --git a/config.dot/firejail/luakit.profile.link b/config.dot/firejail/luakit.profile.link
new file mode 100644 (file)
index 0000000..19ed543
--- /dev/null
+++ b/config.dot/firejail/luakit.profile.link
@@ -0,0 +1,13 @@
+# luakit profile
+
+#blacklist ${HOME}/.wine
+noblacklist ~/.config/luakit
+noblacklist ~/.local/share/luakit
+
+caps.drop all
+netfilter
+nonewprivs
+noroot
+protocol unix,inet,inet6
+seccomp
+shell none