aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/gnome-keyring.profile
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
commit018d75775eab4a0f045949a9d069c57686ca2686 (patch)
treeaac3a1a65cca0d4875795c55109a5c3e35efdefb /etc/profile-a-l/gnome-keyring.profile
parentsmall fixes (diff)
downloadfirejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.gz
firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.zst
firejail-018d75775eab4a0f045949a9d069c57686ca2686.zip
reorganize github etc directory
Diffstat (limited to 'etc/profile-a-l/gnome-keyring.profile')
-rw-r--r--etc/profile-a-l/gnome-keyring.profile57
1 files changed, 57 insertions, 0 deletions
diff --git a/etc/profile-a-l/gnome-keyring.profile b/etc/profile-a-l/gnome-keyring.profile
new file mode 100644
index 000000000..ecbb74158
--- /dev/null
+++ b/etc/profile-a-l/gnome-keyring.profile
@@ -0,0 +1,57 @@
1# Firejail profile for gnome-keyring
2# Description: Stores passwords and encryption keys
3# This file is overwritten after every install/update
4quiet
5# Persistent local customizations
6include gnome-keyring.local
7# Persistent global definitions
8include globals.local
9
10noblacklist ${HOME}/.gnupg
11
12whitelist ${HOME}/.gnupg
13whitelist ${DOWNLOADS}
14include disable-common.inc
15include disable-devel.inc
16include disable-exec.inc
17include disable-passwdmgr.inc
18include disable-interpreters.inc
19include disable-programs.inc
20include disable-xdg.inc
21
22whitelist /usr/share/gnupg
23whitelist /usr/share/gnupg2
24include whitelist-common.inc
25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc
27
28apparmor
29caps.drop all
30ipc-namespace
31machine-id
32netfilter
33no3d
34nodvd
35nogroups
36nonewprivs
37noroot
38nosound
39notv
40nou2f
41novideo
42protocol unix,inet,inet6
43seccomp
44shell none
45tracelog
46
47disable-mnt
48#private-bin gnome-keyrin*,secret-tool
49private-cache
50private-dev
51#private-lib alternatives,gnome-keyring,libsecret-1.so.*,pkcs11,security
52private-tmp
53
54# dbus-user none
55# dbus-system none
56
57memory-deny-write-execute