diff options
| author |  Tad <tad@spotco.us> | 2017-09-16 13:47:31 -0400 |
|---|---|---|
| committer | Tad <tad@spotco.us> | 2017-09-18 18:24:13 -0400 |
| commit | 60606c2d041dc08b0af10baff1b18dbf507f8d81 (patch) | |
| tree | 75ca83f6148cf6e93e75df9be3b85ab702a5fb9c /etc/freecad.profile | |
| parent | Add 5 profiles (diff) | |
| download | firejail-60606c2d041dc08b0af10baff1b18dbf507f8d81.tar.gz firejail-60606c2d041dc08b0af10baff1b18dbf507f8d81.tar.zst firejail-60606c2d041dc08b0af10baff1b18dbf507f8d81.zip | |
Fixup 36 profiles
Diffstat (limited to 'etc/freecad.profile')
| -rw-r--r-- | etc/freecad.profile | 18 |
1 files changed, 7 insertions, 11 deletions
diff --git a/etc/freecad.profile b/etc/freecad.profile index 0467edb6d..c2d4661e8 100644 --- a/etc/freecad.profile +++ b/etc/freecad.profile | |||
| @@ -5,17 +5,13 @@ include /etc/firejail/freecad.local | |||
| 5 | # Persistent global definitions | 5 | # Persistent global definitions |
| 6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
| 7 | 7 | ||
| 8 | blacklist /boot | ||
| 9 | blacklist /media | ||
| 10 | blacklist /mnt | ||
| 11 | blacklist /opt | ||
| 12 | blacklist /usr/local/bin | ||
| 13 | blacklist /usr/local/sbin | ||
| 14 | 8 | ||
| 15 | whitelist ${DOWNLOADS} | 9 | noblacklist ${HOME}/.config/FreeCAD |
| 16 | whitelist ${HOME}/.config/FreeCAD | 10 | |
| 17 | whitelist ${HOME}/Documents | 11 | include /etc/firejail/disable-common.inc |
| 18 | include /etc/firejail/whitelist-common.inc | 12 | include /etc/firejail/disable-devel.inc |
| 13 | include /etc/firejail/disable-passwdmgr.inc | ||
| 14 | include /etc/firejail/disable-programs.inc | ||
| 19 | 15 | ||
| 20 | caps.drop all | 16 | caps.drop all |
| 21 | ipc-namespace | 17 | ipc-namespace |
| @@ -29,7 +25,7 @@ shell none | |||
| 29 | 25 | ||
| 30 | private-bin freecad,freecadcmd | 26 | private-bin freecad,freecadcmd |
| 31 | private-dev | 27 | private-dev |
| 32 | private-etc fonts,passwd,alternatives,X11 | 28 | #private-etc fonts,passwd,alternatives,X11 |
| 33 | private-tmp | 29 | private-tmp |
| 34 | 30 | ||
| 35 | noexec ${HOME} | 31 | noexec ${HOME} |