From c4eff47fbd62d5c9518a6436494881c324b379b8 Mon Sep 17 00:00:00 2001 From: jc_gargma Date: Wed, 9 Feb 2022 13:36:31 -0800 Subject: Updated for firejail 0.9.68 --- unmaintained/qimv.profile | 53 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 53 insertions(+) create mode 100644 unmaintained/qimv.profile (limited to 'unmaintained/qimv.profile') diff --git a/unmaintained/qimv.profile b/unmaintained/qimv.profile new file mode 100644 index 0000000..02d7962 --- /dev/null +++ b/unmaintained/qimv.profile @@ -0,0 +1,53 @@ +# Firejail profile for qimv +# Description: Image viewer +# This file is overwritten after every install/update +# Persistent local customizations +include qimv.local +# Persistent global definitions +include globals.local + +# Comment in these two lines to enable testing the binary from ${HOME} +#ignore noexec ${HOME} +#ignore private-bin qimv,imv + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-programs.inc +include disable-shell.inc +include disable-write-mnt.inc + +#include whitelist-common.inc +#include whitelist-var-common.inc + +apparmor +caps.drop all +machine-id +net none +# no3d +nodvd +nogroups +noinput +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix +seccomp +shell none +tracelog + +# disable-mnt +private-bin qimv,imv +private-cache +private-dev +private-etc fonts,machine-id,localtime,passwd +private-tmp + +memory-deny-write-execute + +dbus-user none +dbus-system none -- cgit v1.2.1