include globals.local
#noblacklist ${HOME}/.cache/chromium
# with >=llvm-4 mesa drivers need llvm stuff
noblacklist /usr/lib/llvm*
#mkdir ${HOME}/.cache/chromium
#whitelist ${HOME}/.cache/chromium
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-interpreters.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc
include /etc/firejail/disable-xdg.inc
#apparmor
caps.drop all
ipc-namespace
machine-id
net none
netfilter template.net
#no3d
#nodbus
nodvd
#nogroups
nonewprivs
noroot
#nosound
notv
nou2f
#novideo
protocol unix,netlink
seccomp @module,@swap
shell none
tracelog
#x11 xorg
disable-mnt
private-dev
private-tmp