quiet
noblacklist ~/.cache/pip/
noblacklist ~/.cache/luarocks/
noblacklist ~/.npm/
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-programs.inc
include /etc/firejail/disable-passwdmgr.inc
whitelist ~/candolint
read-only ~/candolint
mkdir ~/.cache/pip/
mkdir ~/.cache/luarocks/
mkdir ~/.npm/
whitelist ~/.cache/pip/
whitelist ~/.cache/luarocks/
whitelist ~/.npm/
caps.drop all
netfilter
nonewprivs
nogroups
noroot
nosound
no3d
protocol inet,inet6,netlink
seccomp
shell none
dns 8.8.4.4
dns 8.8.8.8
private-dev
private-tmp