aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/inkscape.profile
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2023-01-29 08:53:27 +0000
committerLibravatar GitHub <noreply@github.com>2023-01-29 08:53:27 +0000
commit40783c0373cc2bc2ac9be87bc4bf26ecfb8f0250 (patch)
tree6a5a4059dbd8c97aae3bed4361f90c24c4bf5268 /etc/profile-a-l/inkscape.profile
parentci: profile-checks: comment private-etc-always-required.sh (diff)
downloadfirejail-40783c0373cc2bc2ac9be87bc4bf26ecfb8f0250.tar.gz
firejail-40783c0373cc2bc2ac9be87bc4bf26ecfb8f0250.tar.zst
firejail-40783c0373cc2bc2ac9be87bc4bf26ecfb8f0250.zip
inkscape: additional hardening and settings saving functionality via D-Bus
Diffstat (limited to 'etc/profile-a-l/inkscape.profile')
-rw-r--r--etc/profile-a-l/inkscape.profile16
1 files changed, 15 insertions, 1 deletions
diff --git a/etc/profile-a-l/inkscape.profile b/etc/profile-a-l/inkscape.profile
index 1e75781ab..702bebf36 100644
--- a/etc/profile-a-l/inkscape.profile
+++ b/etc/profile-a-l/inkscape.profile
@@ -28,8 +28,19 @@ include disable-interpreters.inc
28include disable-programs.inc 28include disable-programs.inc
29include disable-xdg.inc 29include disable-xdg.inc
30 30
31mkdir ${HOME}/.cache/inkscape
32mkdir ${HOME}/.config/inkscape
33mkdir ${HOME}/.inkscape
34whitelist ${DOCUMENTS}
35whitelist ${DOWNLOADS}
36whitelist ${PICTURES}
37whitelist ${HOME}/.cache/inkscape
38whitelist ${HOME}/.config/inkscape
39whitelist ${HOME}/.inkscape
31whitelist /usr/share/inkscape 40whitelist /usr/share/inkscape
41include whitelist-common.inc
32include whitelist-run-common.inc 42include whitelist-run-common.inc
43include whitelist-runuser-common.inc
33include whitelist-usr-share-common.inc 44include whitelist-usr-share-common.inc
34include whitelist-var-common.inc 45include whitelist-var-common.inc
35 46
@@ -57,7 +68,10 @@ private-dev
57private-etc ImageMagick*,inkscape: GUI,python* 68private-etc ImageMagick*,inkscape: GUI,python*
58private-tmp 69private-tmp
59 70
60dbus-user none 71dbus-user filter
72dbus-user.own org.inkscape.Inkscape
73dbus-user.talk ca.desrt.dconf
74dbus-user.talk org.gtk.vfs.*
61dbus-system none 75dbus-system none
62 76
63# memory-deny-write-execute 77# memory-deny-write-execute