aboutsummaryrefslogtreecommitdiffstats
path: root/etc/gnome-screenshot.profile
diff options
context:
space:
mode:
authorLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2020-03-15 12:55:09 +0100
committerLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2020-03-15 12:55:09 +0100
commit35443058b6539e8ed251c40bd342912a7e2c1484 (patch)
tree106b848faf3ab7eb27dfbb2b3490fcc9d7949633 /etc/gnome-screenshot.profile
parentUpdate file.profile (diff)
downloadfirejail-35443058b6539e8ed251c40bd342912a7e2c1484.tar.gz
firejail-35443058b6539e8ed251c40bd342912a7e2c1484.tar.zst
firejail-35443058b6539e8ed251c40bd342912a7e2c1484.zip
add gnome-screenshot.profile
patch for xdg-dbus-proxy ``` --- a/etc/gnome-screenshot.profile +++ b/etc/gnome-screenshot.profile @@ -45,3 +45,8 @@ private-bin gnome-screenshot private-dev private-etc dconf,fonts,gtk-3.0,localtime,machine-id private-tmp + +dbus-user filter +dbus-user.own org.gnome.Screenshot +dbus-user.talk org.gnome.Shell.Screenshot +dbus-system block ``` patch for whitelist-runuser-common.inc ``` --- a/etc/gnome-screenshot.profile +++ b/etc/gnome-screenshot.profile @@ -17,11 +17,8 @@ include disable-passwdmgr.inc include disable-programs.inc include disable-xdg.inc -whitelist ${RUNUSER}/bus -whitelist ${RUNUSER}/pulse -whitelist ${RUNUSER}/gdm/Xauthority -whitelist ${RUNUSER}/wayland-0 include whitelist-usr-share-common.inc +include whitelist-runuser-common.inc include whitelist-var-common.inc apparmor ```
Diffstat (limited to 'etc/gnome-screenshot.profile')
-rw-r--r--etc/gnome-screenshot.profile47
1 files changed, 47 insertions, 0 deletions
diff --git a/etc/gnome-screenshot.profile b/etc/gnome-screenshot.profile
new file mode 100644
index 000000000..c00aefdb7
--- /dev/null
+++ b/etc/gnome-screenshot.profile
@@ -0,0 +1,47 @@
1# Firejail profile for gnome-screenshot
2# Description: GNOME screenshot tool
3# This file is overwritten after every install/update
4# Persistent local customizations
5include gnome-screenshot.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${PICTURES}
10noblacklist ${HOME}/.cache/gnome-screenshot
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18include disable-xdg.inc
19
20whitelist ${RUNUSER}/bus
21whitelist ${RUNUSER}/pulse
22whitelist ${RUNUSER}/gdm/Xauthority
23whitelist ${RUNUSER}/wayland-0
24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc
26
27apparmor
28caps.drop all
29net none
30no3d
31nodvd
32nogroups
33nonewprivs
34noroot
35notv
36nou2f
37novideo
38protocol unix
39seccomp
40shell none
41tracelog
42
43disable-mnt
44private-bin gnome-screenshot
45private-dev
46private-etc dconf,fonts,gtk-3.0,localtime,machine-id
47private-tmp