diff options
author | 2023-01-29 08:53:27 +0000 | |
---|---|---|
committer | 2023-01-29 08:53:27 +0000 | |
commit | 40783c0373cc2bc2ac9be87bc4bf26ecfb8f0250 (patch) | |
tree | 6a5a4059dbd8c97aae3bed4361f90c24c4bf5268 | |
parent | ci: profile-checks: comment private-etc-always-required.sh (diff) | |
download | firejail-40783c0373cc2bc2ac9be87bc4bf26ecfb8f0250.tar.gz firejail-40783c0373cc2bc2ac9be87bc4bf26ecfb8f0250.tar.zst firejail-40783c0373cc2bc2ac9be87bc4bf26ecfb8f0250.zip |
inkscape: additional hardening and settings saving functionality via D-Bus
-rw-r--r-- | etc/profile-a-l/inkscape.profile | 16 |
1 files changed, 15 insertions, 1 deletions
diff --git a/etc/profile-a-l/inkscape.profile b/etc/profile-a-l/inkscape.profile index 1e75781ab..702bebf36 100644 --- a/etc/profile-a-l/inkscape.profile +++ b/etc/profile-a-l/inkscape.profile | |||
@@ -28,8 +28,19 @@ include disable-interpreters.inc | |||
28 | include disable-programs.inc | 28 | include disable-programs.inc |
29 | include disable-xdg.inc | 29 | include disable-xdg.inc |
30 | 30 | ||
31 | mkdir ${HOME}/.cache/inkscape | ||
32 | mkdir ${HOME}/.config/inkscape | ||
33 | mkdir ${HOME}/.inkscape | ||
34 | whitelist ${DOCUMENTS} | ||
35 | whitelist ${DOWNLOADS} | ||
36 | whitelist ${PICTURES} | ||
37 | whitelist ${HOME}/.cache/inkscape | ||
38 | whitelist ${HOME}/.config/inkscape | ||
39 | whitelist ${HOME}/.inkscape | ||
31 | whitelist /usr/share/inkscape | 40 | whitelist /usr/share/inkscape |
41 | include whitelist-common.inc | ||
32 | include whitelist-run-common.inc | 42 | include whitelist-run-common.inc |
43 | include whitelist-runuser-common.inc | ||
33 | include whitelist-usr-share-common.inc | 44 | include whitelist-usr-share-common.inc |
34 | include whitelist-var-common.inc | 45 | include whitelist-var-common.inc |
35 | 46 | ||
@@ -57,7 +68,10 @@ private-dev | |||
57 | private-etc ImageMagick*,inkscape: GUI,python* | 68 | private-etc ImageMagick*,inkscape: GUI,python* |
58 | private-tmp | 69 | private-tmp |
59 | 70 | ||
60 | dbus-user none | 71 | dbus-user filter |
72 | dbus-user.own org.inkscape.Inkscape | ||
73 | dbus-user.talk ca.desrt.dconf | ||
74 | dbus-user.talk org.gtk.vfs.* | ||
61 | dbus-system none | 75 | dbus-system none |
62 | 76 | ||
63 | # memory-deny-write-execute | 77 | # memory-deny-write-execute |