summaryrefslogtreecommitdiffstats
path: root/etc/gnome-maps.profile
diff options
context:
space:
mode:
authorLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
committerLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
commit9e3ba319be6b9546d7e8f450ca419ee2f3f4040b (patch)
tree0aebe82de78a61877c267f4dcb2ebcc13a2e37c9 /etc/gnome-maps.profile
parentvarious profile fixes (#1433) (diff)
downloadfirejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.gz
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.zst
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.zip
Unify all profiles
Diffstat (limited to 'etc/gnome-maps.profile')
-rw-r--r--etc/gnome-maps.profile25
1 files changed, 13 insertions, 12 deletions
diff --git a/etc/gnome-maps.profile b/etc/gnome-maps.profile
index 8c7310fa9..79ea783a6 100644
--- a/etc/gnome-maps.profile
+++ b/etc/gnome-maps.profile
@@ -1,20 +1,19 @@
1# Persistent global definitions go here 1# Firejail profile for gnome-maps
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/gnome-maps.local 4include /etc/firejail/gnome-maps.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7 7
8# gnome-maps profile
9
10# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
11noblacklist ${HOME}/.cache/champlain 8noblacklist ${HOME}/.cache/champlain
9
12include /etc/firejail/disable-common.inc 10include /etc/firejail/disable-common.inc
13include /etc/firejail/disable-programs.inc
14include /etc/firejail/disable-devel.inc 11include /etc/firejail/disable-devel.inc
15include /etc/firejail/disable-passwdmgr.inc 12include /etc/firejail/disable-passwdmgr.inc
13include /etc/firejail/disable-programs.inc
16 14
17caps.drop all 15caps.drop all
16netfilter
18nogroups 17nogroups
19nonewprivs 18nonewprivs
20noroot 19noroot
@@ -22,15 +21,17 @@ nosound
22novideo 21novideo
23protocol unix,inet,inet6 22protocol unix,inet,inet6
24seccomp 23seccomp
25netfilter
26shell none 24shell none
27tracelog 25tracelog
28 26
27disable-mnt
29# private-bin gjs gnome-maps 28# private-bin gjs gnome-maps
30private-tmp
31private-dev 29private-dev
32# private-etc fonts 30# private-etc fonts
33disable-mnt 31private-tmp
34 32
35noexec ${HOME} 33noexec ${HOME}
36noexec /tmp 34noexec /tmp
35
36# CLOBBERED COMMENTS
37# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them