aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/gnome-logs.profile
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2023-09-23 01:42:08 +0000
committerLibravatar GitHub <noreply@github.com>2023-09-23 01:42:08 +0000
commitdd55390120efe17550ddcec1b336d8c1c44806a4 (patch)
tree1ca7630e03685f334e0d35b0d26bc132aca23997 /etc/profile-a-l/gnome-logs.profile
parentMerge pull request #5993 from kmk3/modif-keep-pipewire-group (diff)
downloadfirejail-dd55390120efe17550ddcec1b336d8c1c44806a4.tar.gz
firejail-dd55390120efe17550ddcec1b336d8c1c44806a4.tar.zst
firejail-dd55390120efe17550ddcec1b336d8c1c44806a4.zip
profiles: refactor log viewers (#5996)
* profiles: refactor log viewers Introduces system-log-common.profile as a common profile for existing GUI log viewer applications. * system-log-common: enable no3d
Diffstat (limited to 'etc/profile-a-l/gnome-logs.profile')
-rw-r--r--etc/profile-a-l/gnome-logs.profile42
1 files changed, 4 insertions, 38 deletions
diff --git a/etc/profile-a-l/gnome-logs.profile b/etc/profile-a-l/gnome-logs.profile
index 61f4f4107..4d2681fbc 100644
--- a/etc/profile-a-l/gnome-logs.profile
+++ b/etc/profile-a-l/gnome-logs.profile
@@ -6,49 +6,15 @@ include gnome-logs.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9include disable-common.inc 9whitelist /usr/share/gnome-logs
10include disable-devel.inc
11include disable-exec.inc
12include disable-interpreters.inc
13include disable-programs.inc
14include disable-shell.inc
15include disable-xdg.inc
16 10
17whitelist /var/log/journal
18include whitelist-runuser-common.inc
19include whitelist-usr-share-common.inc
20include whitelist-var-common.inc
21
22apparmor
23caps.drop all
24ipc-namespace
25net none
26no3d
27nodvd
28noinput
29nonewprivs
30nosound
31notv
32nou2f
33novideo
34protocol unix
35seccomp
36tracelog
37
38disable-mnt
39private-bin gnome-logs 11private-bin gnome-logs
40private-cache
41private-dev
42private-etc
43private-lib gdk-pixbuf-2.*,gio,gvfs/libgvfscommon.so,libgconf-2.so.*,librsvg-2.so.* 12private-lib gdk-pixbuf-2.*,gio,gvfs/libgvfscommon.so,libgconf-2.so.*,librsvg-2.so.*
44private-tmp
45writable-var-log
46 13
47dbus-user filter 14dbus-user filter
48dbus-user.own org.gnome.Logs 15dbus-user.own org.gnome.Logs
49dbus-user.talk ca.desrt.dconf 16dbus-user.talk ca.desrt.dconf
50dbus-system none 17ignore dbus-user none
51 18
52# Add 'ignore read-only ${HOME}' to your gnome-logs.local if you export logs to a file under your ${HOME}. 19# Redirect
53read-only ${HOME} 20include system-log-common.profile
54restrict-namespaces