diff options
author | Tad <tad@spotco.us> | 2017-09-16 13:47:31 -0400 |
---|---|---|
committer | Tad <tad@spotco.us> | 2017-09-18 18:24:13 -0400 |
commit | 60606c2d041dc08b0af10baff1b18dbf507f8d81 (patch) | |
tree | 75ca83f6148cf6e93e75df9be3b85ab702a5fb9c /etc/google-earth.profile | |
parent | Add 5 profiles (diff) | |
download | firejail-60606c2d041dc08b0af10baff1b18dbf507f8d81.tar.gz firejail-60606c2d041dc08b0af10baff1b18dbf507f8d81.tar.zst firejail-60606c2d041dc08b0af10baff1b18dbf507f8d81.zip |
Fixup 36 profiles
Diffstat (limited to 'etc/google-earth.profile')
-rw-r--r-- | etc/google-earth.profile | 22 |
1 files changed, 12 insertions, 10 deletions
diff --git a/etc/google-earth.profile b/etc/google-earth.profile index a339402e2..11d55281a 100644 --- a/etc/google-earth.profile +++ b/etc/google-earth.profile | |||
@@ -5,16 +5,18 @@ include /etc/firejail/google-earth.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
7 | 7 | ||
8 | blacklist /boot | 8 | noblacklist ${HOME}/.config/Google |
9 | blacklist /media | 9 | noblacklist ${HOME}/.googleearth |
10 | blacklist /mnt | ||
11 | 10 | ||
11 | include /etc/firejail/disable-common.inc | ||
12 | include /etc/firejail/disable-devel.inc | ||
13 | include /etc/firejail/disable-passwdmgr.inc | ||
14 | include /etc/firejail/disable-programs.inc | ||
15 | |||
16 | mkdir ${HOME}/.config/Google | ||
17 | mkdir ${HOME}/.googleearth | ||
12 | whitelist ${HOME}/.config/Google | 18 | whitelist ${HOME}/.config/Google |
13 | whitelist ${HOME}/.googleearth/Cache/ | 19 | whitelist ${HOME}/.googleearth |
14 | whitelist ${HOME}/.googleearth/Temp/ | ||
15 | whitelist ${HOME}/.googleearth/myplaces.backup.kml | ||
16 | whitelist ${HOME}/.googleearth/myplaces.kml | ||
17 | whitelist /tmp/.X11-unix | ||
18 | include /etc/firejail/whitelist-common.inc | 20 | include /etc/firejail/whitelist-common.inc |
19 | 21 | ||
20 | caps.drop all | 22 | caps.drop all |
@@ -26,7 +28,7 @@ shell none | |||
26 | 28 | ||
27 | private-bin google-earth,sh,grep,sed,ls,dirname | 29 | private-bin google-earth,sh,grep,sed,ls,dirname |
28 | private-dev | 30 | private-dev |
29 | private-etc fonts,resolv.conf,X11,alternatives,pulse | 31 | #private-etc fonts,resolv.conf,X11,alternatives,pulse |
30 | 32 | ||
31 | noexec /home | 33 | noexec ${HOME} |
32 | noexec /tmp | 34 | noexec /tmp |