aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar rusty-snake <print_hello_world+GitHub@protonmail.com>2018-12-31 04:14:38 +0000
committerLibravatar Fred Barclay <Fred-Barclay@users.noreply.github.com>2018-12-30 22:14:38 -0600
commit803d629fcc2517e3423c9a3e6865997f080517eb (patch)
tree51b41ead9a7fd3c79c639a9668703ff1c08789cd
parentMerge pull request #2313 from rusty-snake/patch-1 (diff)
downloadfirejail-803d629fcc2517e3423c9a3e6865997f080517eb.tar.gz
firejail-803d629fcc2517e3423c9a3e6865997f080517eb.tar.zst
firejail-803d629fcc2517e3423c9a3e6865997f080517eb.zip
Add a profile for ghostwriter (#2319)
* Add a profile for ghostwriter
-rw-r--r--etc/disable-programs.inc1
-rw-r--r--etc/ghostwriter.profile61
-rw-r--r--src/firecfg/firecfg.config1
3 files changed, 63 insertions, 0 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 68c2da174..08438a165 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -148,6 +148,7 @@ blacklist ${HOME}/.config/geany
148blacklist ${HOME}/.config/gedit 148blacklist ${HOME}/.config/gedit
149blacklist ${HOME}/.config/geeqie 149blacklist ${HOME}/.config/geeqie
150blacklist ${HOME}/.config/ghb 150blacklist ${HOME}/.config/ghb
151blacklist ${HOME}/.config/ghostwriter
151blacklist ${HOME}/.config/globaltime 152blacklist ${HOME}/.config/globaltime
152blacklist ${HOME}/.config/gnome-mplayer 153blacklist ${HOME}/.config/gnome-mplayer
153blacklist ${HOME}/.config/gnome-mpv 154blacklist ${HOME}/.config/gnome-mpv
diff --git a/etc/ghostwriter.profile b/etc/ghostwriter.profile
new file mode 100644
index 000000000..bdca281ed
--- /dev/null
+++ b/etc/ghostwriter.profile
@@ -0,0 +1,61 @@
1# Firejail profile for ghostwriter
2# Description: Cross-platform, aesthetic, distraction-free Markdown editor.
3# This file is overwritten after every install/update
4# Persistent local customizations
5include ghostwriter.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/ghostwriter
10noblacklist ${DOCUMENTS}
11noblacklist ${PICTURES}
12
13include disable-common.inc
14include disable-devel.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18include disable-xdg.inc
19
20#mkdir ${HOME}/.config/ghostwriter
21#mkdir ${DESKTOP}
22#mkdir ${DOCUMENTS}
23#mkdir ${DOWNLOADS}
24#mkdir ${PICTURES}
25#whitelist ${HOME}/.config/ghostwriter
26#whitelist ${DESKTOP}
27#whitelist ${DOCUMENTS}
28#whitelist ${DOWNLOADS}
29#whitelist ${PICTURES}
30#include whitelist-common.inc
31
32apparmor
33caps.drop all
34machine-id
35netfilter
36#no3d
37#nodbus
38nodvd
39nogroups
40nonewprivs
41noroot
42nosound
43notv
44nou2f
45novideo
46protocol unix,inet,netlink
47seccomp
48shell none
49tracelog
50
51# Breaks Translation
52#private-bin ghostwriter,pandoc
53private-cache
54private-dev
55private-etc cups,crypto-policies,localtime,drirc,fonts,gtk-3.0,dconf,machine-id
56# Breaks Translation
57#private-lib
58private-tmp
59
60noexec ${HOME}
61noexec /tmp
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index f36455c89..0dd5f7ec5 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -167,6 +167,7 @@ geary
167gedit 167gedit
168geeqie 168geeqie
169ghb 169ghb
170ghostwriter
170gimp 171gimp
171gimp-2.10 172gimp-2.10
172gimp-2.8 173gimp-2.8