diff options
author | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2020-03-14 23:55:30 -0700 |
---|---|---|
committer | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2020-03-14 23:55:30 -0700 |
commit | 176dae16c44794f30cb347dfd84fe84bcc5c9708 (patch) | |
tree | 3c3b092e9446c01e5613c7596e5fa89277cb1385 /profiles/kget.local | |
download | firejail-profiles-176dae16c44794f30cb347dfd84fe84bcc5c9708.tar.xz |
Initial commit
Diffstat (limited to 'profiles/kget.local')
-rw-r--r-- | profiles/kget.local | 41 |
1 files changed, 41 insertions, 0 deletions
diff --git a/profiles/kget.local b/profiles/kget.local new file mode 100644 index 0000000..0ac7a0a --- /dev/null +++ b/profiles/kget.local @@ -0,0 +1,41 @@ +ignore noblacklist ${HOME}/.kde/share/apps/kget +ignore noblacklist ${HOME}/.kde/share/config/kgetrc +ignore noblacklist ${HOME}/.kde4/share/apps/kget +ignore noblacklist ${HOME}/.kde4/share/config/kgetrc +ignore read-only ${HOME}/.cache/ksycoca5_* + +noblacklist ${HOME}/.config/kget_bittorrentfactory.rc +noblacklist ${HOME}/.config/kget_metalinkfactory.rc +noblacklist ${HOME}/.config/kget_multisegkiofactory.rc +noblacklist ${VIDEOS} + +include disable-xdg.inc + +whitelist ${DOWNLOADS} +whitelist ${VIDEOS} +whitelist ${HOME}/ISOs +# # whitelist entire .config as kde workaround +whitelist ${HOME}/.config +whitelist ${HOME}/.config/kgetrc +whitelist ${HOME}/.config/kget_bittorrentfactory.rc +whitelist ${HOME}/.config/kget_metalinkfactory.rc +whitelist ${HOME}/.config/kget_multisegkiofactory.rc +whitelist ${HOME}/.local/share/kget +include whitelist-common.inc + +# ipc-namespace +# # no3d breaks gpu accelerated rendering +ignore no3d +# # nodbus breaks systray support +ignore nodbus +# machine-id +protocol unix,inet,netlink +# # seccomp breaks integrated file manager on kde applications +# # due to syscall name_to_handle_at +seccomp !name_to_handle_at +tracelog + +disable-mnt +private-bin bash,dbus-launch,kget,kdeinit5 +private-cache +private-etc ca-certificates,fonts,localtime,machine-id,passwd,resolv.conf,ssl,xdg |