diff options
| author | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2020-03-14 23:55:30 -0700 |
|---|---|---|
| committer | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2020-03-14 23:55:30 -0700 |
| commit | 176dae16c44794f30cb347dfd84fe84bcc5c9708 (patch) | |
| tree | 3c3b092e9446c01e5613c7596e5fa89277cb1385 /profiles/karbon.profile | |
| download | firejail-profiles-176dae16c44794f30cb347dfd84fe84bcc5c9708.tar.xz | |
Initial commit
Diffstat (limited to 'profiles/karbon.profile')
| -rw-r--r-- | profiles/karbon.profile | 53 |
1 files changed, 53 insertions, 0 deletions
diff --git a/profiles/karbon.profile b/profiles/karbon.profile new file mode 100644 index 0000000..330753c --- /dev/null +++ b/profiles/karbon.profile @@ -0,0 +1,53 @@ +# Firejail profile for karbon +# This file is overwritten after every install/update +# Persistent local customizations +include karbon.local +# Persistent global definitions +include globals.local + +# Breaks opening svg files +ignore noexec ${HOME} + +noblacklist ${HOME}/.config/karbonrc +noblacklist ${HOME}/.local/share/karbon +noblacklist ${DOCUMENTS} +noblacklist ${PICTURES} + +# Allow python (blacklisted by disable-interpreters.inc) +noblacklist ${PATH}/python2* +noblacklist ${PATH}/python3* +noblacklist /usr/lib/python2* +noblacklist /usr/lib/python3* + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +apparmor +caps.drop all +# # ipc-namespace breaks menus +ignore ipc-namespace +# net none +netfilter +# nodbus +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix +# # seccomp breaks integrated file manager on kde applications +# # due to syscall name_to_handle_at +seccomp !name_to_handle_at +shell none + +private-cache +private-dev +private-tmp |