include globals.local
#noblacklist ${HOME}/.wine-template
# with >=llvm-4 mesa drivers need llvm stuff
noblacklist /usr/lib/llvm*
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-interpreters.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc
include /etc/firejail/disable-xdg.inc
#mkdir ${HOME}/.wine-template
#whitelist ${HOME}/.wine-template
#include whitelist-common.inc
#apparmor
caps.drop all
#ipc-namespace
machine-id
net none
netfilter template.net
#no3d
#nodbus
nodvd
#nogroups
nonewprivs
noroot
#nosound
notv
nou2f
#novideo
protocol unix,netlink
seccomp @module,@swap
shell none
tracelog
#x11 xorg
disable-mnt
private-dev
private-tmp