aboutsummaryrefslogtreecommitdiffstats
path: root/etc/gnome-books.profile
diff options
context:
space:
mode:
authorLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
committerLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
commit9e3ba319be6b9546d7e8f450ca419ee2f3f4040b (patch)
tree0aebe82de78a61877c267f4dcb2ebcc13a2e37c9 /etc/gnome-books.profile
parentvarious profile fixes (#1433) (diff)
downloadfirejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.gz
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.zst
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.zip
Unify all profiles
Diffstat (limited to 'etc/gnome-books.profile')
-rw-r--r--etc/gnome-books.profile22
1 files changed, 11 insertions, 11 deletions
diff --git a/etc/gnome-books.profile b/etc/gnome-books.profile
index e36294930..e934b48a5 100644
--- a/etc/gnome-books.profile
+++ b/etc/gnome-books.profile
@@ -1,19 +1,16 @@
1# Persistent global definitions go here 1# Firejail profile for gnome-books
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/gnome-books.local 4include /etc/firejail/gnome-books.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7 7
8# gnome-books profile
9
10# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
11noblacklist ~/.cache/org.gnome.Books 8noblacklist ~/.cache/org.gnome.Books
12 9
13include /etc/firejail/disable-common.inc 10include /etc/firejail/disable-common.inc
14include /etc/firejail/disable-programs.inc
15include /etc/firejail/disable-devel.inc 11include /etc/firejail/disable-devel.inc
16include /etc/firejail/disable-passwdmgr.inc 12include /etc/firejail/disable-passwdmgr.inc
13include /etc/firejail/disable-programs.inc
17 14
18caps.drop all 15caps.drop all
19netfilter 16netfilter
@@ -29,9 +26,12 @@ shell none
29tracelog 26tracelog
30 27
31# private-bin gjs gnome-books 28# private-bin gjs gnome-books
32private-tmp
33private-dev 29private-dev
34#private-etc fonts 30# private-etc fonts
31private-tmp
35 32
36noexec ${HOME} 33noexec ${HOME}
37noexec /tmp 34noexec /tmp
35
36# CLOBBERED COMMENTS
37# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them