aboutsummaryrefslogtreecommitdiffstats
path: root/etc/gnome-weather.profile
diff options
context:
space:
mode:
authorLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
committerLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
commit9e3ba319be6b9546d7e8f450ca419ee2f3f4040b (patch)
tree0aebe82de78a61877c267f4dcb2ebcc13a2e37c9 /etc/gnome-weather.profile
parentvarious profile fixes (#1433) (diff)
downloadfirejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.gz
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.zst
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.zip
Unify all profiles
Diffstat (limited to 'etc/gnome-weather.profile')
-rw-r--r--etc/gnome-weather.profile24
1 files changed, 12 insertions, 12 deletions
diff --git a/etc/gnome-weather.profile b/etc/gnome-weather.profile
index 815fba7ca..77538ad6e 100644
--- a/etc/gnome-weather.profile
+++ b/etc/gnome-weather.profile
@@ -1,21 +1,19 @@
1# Persistent global definitions go here 1# Firejail profile for gnome-weather
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/gnome-weather.local 4include /etc/firejail/gnome-weather.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7 7
8# gnome-weather profile
9
10# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
11noblacklist ~/.cache/libgweather 8noblacklist ~/.cache/libgweather
12 9
13include /etc/firejail/disable-common.inc 10include /etc/firejail/disable-common.inc
14include /etc/firejail/disable-programs.inc
15include /etc/firejail/disable-devel.inc 11include /etc/firejail/disable-devel.inc
16include /etc/firejail/disable-passwdmgr.inc 12include /etc/firejail/disable-passwdmgr.inc
13include /etc/firejail/disable-programs.inc
17 14
18caps.drop all 15caps.drop all
16netfilter
19no3d 17no3d
20nogroups 18nogroups
21nonewprivs 19nonewprivs
@@ -24,15 +22,17 @@ nosound
24novideo 22novideo
25protocol unix,inet,inet6 23protocol unix,inet,inet6
26seccomp 24seccomp
27netfilter
28shell none 25shell none
29tracelog 26tracelog
30 27
28disable-mnt
31# private-bin gjs gnome-weather 29# private-bin gjs gnome-weather
32private-tmp
33private-dev 30private-dev
34# private-etc fonts 31# private-etc fonts
35disable-mnt 32private-tmp
36 33
37noexec ${HOME} 34noexec ${HOME}
38noexec /tmp 35noexec /tmp
36
37# CLOBBERED COMMENTS
38# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them