aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/gnome-weather.profile
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
commit018d75775eab4a0f045949a9d069c57686ca2686 (patch)
treeaac3a1a65cca0d4875795c55109a5c3e35efdefb /etc/profile-a-l/gnome-weather.profile
parentsmall fixes (diff)
downloadfirejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.gz
firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.zst
firejail-018d75775eab4a0f045949a9d069c57686ca2686.zip
reorganize github etc directory
Diffstat (limited to 'etc/profile-a-l/gnome-weather.profile')
-rw-r--r--etc/profile-a-l/gnome-weather.profile48
1 files changed, 48 insertions, 0 deletions
diff --git a/etc/profile-a-l/gnome-weather.profile b/etc/profile-a-l/gnome-weather.profile
new file mode 100644
index 000000000..a181f1b9e
--- /dev/null
+++ b/etc/profile-a-l/gnome-weather.profile
@@ -0,0 +1,48 @@
1# Firejail profile for gnome-weather
2# Description: Access current conditions and forecasts
3# This file is overwritten after every install/update
4# Persistent local customizations
5include gnome-weather.local
6# Persistent global definitions
7include globals.local
8
9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
10
11noblacklist ${HOME}/.cache/libgweather
12
13# Allow gjs (blacklisted by disable-interpreters.inc)
14include allow-gjs.inc
15
16include disable-common.inc
17include disable-devel.inc
18include disable-exec.inc
19include disable-interpreters.inc
20include disable-passwdmgr.inc
21include disable-programs.inc
22include disable-xdg.inc
23
24include whitelist-runuser-common.inc
25include whitelist-var-common.inc
26
27caps.drop all
28netfilter
29no3d
30nodvd
31nogroups
32nonewprivs
33noroot
34nosound
35notv
36nou2f
37novideo
38protocol unix,inet,inet6
39seccomp
40shell none
41tracelog
42
43disable-mnt
44# private-bin gjs,gnome-weather
45private-dev
46# private-etc alternatives,ca-certificates,crypto-policies,fonts,pki,ssl
47private-tmp
48