aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/libreoffice.profile
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2021-05-13 13:48:23 +0000
committerLibravatar GitHub <noreply@github.com>2021-05-13 13:48:23 +0000
commit9fca4500c4d527afce3bd2228388c4a1990772a9 (patch)
treedf014efe5652cb3f8d5a215caa1006e3fb770cae /etc/profile-a-l/libreoffice.profile
parentManpage fixes (diff)
downloadfirejail-9fca4500c4d527afce3bd2228388c4a1990772a9.tar.gz
firejail-9fca4500c4d527afce3bd2228388c4a1990772a9.tar.zst
firejail-9fca4500c4d527afce3bd2228388c4a1990772a9.zip
Follow-up for #4165 (#4271)
* Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * fix noroot comment As suggested [here](https://github.com/netblue30/firejail/pull/4271#discussion_r630981737). * fix dbus-user comment As suggested [here](https://github.com/netblue30/firejail/pull/4271#discussion_r630982527). * fix private-dev comment As suggested [here](https://github.com/netblue30/firejail/pull/4271#discussion_r630980029). * fix private-etc comment As suggested [here](https://github.com/netblue30/firejail/pull/4271#discussion_r630979698). * move writable-var comment cfr. profile.template
Diffstat (limited to 'etc/profile-a-l/libreoffice.profile')
-rw-r--r--etc/profile-a-l/libreoffice.profile18
1 files changed, 10 insertions, 8 deletions
diff --git a/etc/profile-a-l/libreoffice.profile b/etc/profile-a-l/libreoffice.profile
index 0041f2540..e4440eac0 100644
--- a/etc/profile-a-l/libreoffice.profile
+++ b/etc/profile-a-l/libreoffice.profile
@@ -9,8 +9,8 @@ include globals.local
9noblacklist /usr/local/sbin 9noblacklist /usr/local/sbin
10noblacklist ${HOME}/.config/libreoffice 10noblacklist ${HOME}/.config/libreoffice
11 11
12# libreoffice uses java for some certain operations 12# libreoffice uses java for some functionality.
13# comment if you don't care about java functionality 13# Add 'ignore include allow-java.inc' to your libreoffice.local if you don't need that functionality.
14# Allow java (blacklisted by disable-devel.inc) 14# Allow java (blacklisted by disable-devel.inc)
15include allow-java.inc 15include allow-java.inc
16 16
@@ -22,26 +22,28 @@ include disable-programs.inc
22 22
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
25# ubuntu 18.04 comes with its own apparmor profile, but it is not in enforce mode. 25# Debian 10/Ubuntu 18.04 come with their own apparmor profile, but it is not in enforce mode.
26# comment the next line to use the ubuntu profile instead of firejail's apparmor profile 26# Add the next lines to your libreoffice.local to use the Ubuntu profile instead of firejail's apparmor profile.
27#ignore apparmor
28#ignore nonewprivs
29#ignore protocol
30#ignore seccomp
31#ignore tracelog
32
27apparmor 33apparmor
28caps.drop all 34caps.drop all
29netfilter 35netfilter
30nodvd 36nodvd
31nogroups 37nogroups
32noinput 38noinput
33# comment nonewprivs when using the ubuntu 18.04/debian 10 apparmor profile
34nonewprivs 39nonewprivs
35noroot 40noroot
36notv 41notv
37nou2f 42nou2f
38novideo 43novideo
39# comment the protocol line when using the ubuntu 18.04/debian 10 apparmor profile
40protocol unix,inet,inet6 44protocol unix,inet,inet6
41# comment seccomp when using the ubuntu 18.04/debian 10 apparmor profile
42seccomp 45seccomp
43shell none 46shell none
44# comment tracelog when using the ubuntu 18.04/debian 10 apparmor profile
45tracelog 47tracelog
46 48
47#private-bin libreoffice,sh,uname,dirname,grep,sed,basename,ls 49#private-bin libreoffice,sh,uname,dirname,grep,sed,basename,ls