includes/shell/firejail.profile

   1 # Firejail profile used by MediaWiki when shelling out
   2 # Most rules are applied via command-line flags controlled by the
   3 # Shell::RESTRICTION_* constants.
   4 # Rules added to this file must be compatible with every command that could
   5 # be invoked. If something might need to be disabled, then it should be added
   6 # as a Shell:RESTRICTION_* constant instead so that commands can opt-in/out.
   7
   8 # See <https://firejail.wordpress.com/features-3/man-firejail-profile/> for
   9 # syntax documentation.
  10
  11 # Optionally allow sysadmins to set extra restrictions that apply to their
  12 # MediaWiki setup, e.g. disallowing access to extra private directories.
  13 include /etc/firejail/mediawiki.local
  14
  15 # Include any global firejail customizations.
  16 include /etc/firejail/globals.local