aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l
diff options
context:
space:
mode:
authorLibravatar rusty-snake <41237666+rusty-snake@users.noreply.github.com>2020-11-16 11:41:35 +0100
committerLibravatar rusty-snake <41237666+rusty-snake@users.noreply.github.com>2020-11-16 11:41:35 +0100
commit096d0de5f8bb253d0c1035796464bc5982f06f81 (patch)
treed9634d1c26afca63ada52f66dd55eb09a46647dd /etc/profile-a-l
parentAdd XAUTHORITY file of sddm from openSUSE Tumblew… (diff)
downloadfirejail-096d0de5f8bb253d0c1035796464bc5982f06f81.tar.gz
firejail-096d0de5f8bb253d0c1035796464bc5982f06f81.tar.zst
firejail-096d0de5f8bb253d0c1035796464bc5982f06f81.zip
from my overrides
- add seccomp.block-secondary to a lot profiles - add wruc to firefox-common and ignore it in TB and firefox-common-addons - harden dia, gnome-keyring, libreoffice, megaglest, pngquant, ghostwriter, rhythmbox, sqlitebrowser
Diffstat (limited to 'etc/profile-a-l')
-rw-r--r--etc/profile-a-l/0ad.profile2
-rw-r--r--etc/profile-a-l/baobab.profile1
-rw-r--r--etc/profile-a-l/bijiben.profile1
-rw-r--r--etc/profile-a-l/celluloid.profile1
-rw-r--r--etc/profile-a-l/dconf-editor.profile1
-rw-r--r--etc/profile-a-l/dia.profile13
-rw-r--r--etc/profile-a-l/eo-common.profile2
-rw-r--r--etc/profile-a-l/evince.profile1
-rw-r--r--etc/profile-a-l/ffmpeg.profile1
-rw-r--r--etc/profile-a-l/file-roller.profile1
-rw-r--r--etc/profile-a-l/firefox-common.profile1
-rw-r--r--etc/profile-a-l/flameshot.profile1
-rw-r--r--etc/profile-a-l/frogatto.profile1
-rw-r--r--etc/profile-a-l/gapplication.profile1
-rw-r--r--etc/profile-a-l/gedit.profile1
-rw-r--r--etc/profile-a-l/gfeeds.profile1
-rw-r--r--etc/profile-a-l/ghostwriter.profile2
-rw-r--r--etc/profile-a-l/gitg.profile1
-rw-r--r--etc/profile-a-l/gnome-calculator.profile1
-rw-r--r--etc/profile-a-l/gnome-calendar.profile1
-rw-r--r--etc/profile-a-l/gnome-characters.profile1
-rw-r--r--etc/profile-a-l/gnome-contacts.profile1
-rw-r--r--etc/profile-a-l/gnome-hexgl.profile1
-rw-r--r--etc/profile-a-l/gnome-keyring.profile11
-rw-r--r--etc/profile-a-l/gnome-latex.profile1
-rw-r--r--etc/profile-a-l/gnome-maps.profile1
-rw-r--r--etc/profile-a-l/gnome-passwordsafe.profile1
-rw-r--r--etc/profile-a-l/gnome-photos.profile1
-rw-r--r--etc/profile-a-l/gnome-screenshot.profile1
-rw-r--r--etc/profile-a-l/gnome-sound-recorder.profile1
-rw-r--r--etc/profile-a-l/gnome-weather.profile1
-rw-r--r--etc/profile-a-l/gnome_games-common.profile1
-rw-r--r--etc/profile-a-l/gucharmap.profile1
-rw-r--r--etc/profile-a-l/keepassxc.profile1
-rw-r--r--etc/profile-a-l/libreoffice.profile2
35 files changed, 56 insertions, 5 deletions
diff --git a/etc/profile-a-l/0ad.profile b/etc/profile-a-l/0ad.profile
index 6869ea631..c4e820078 100644
--- a/etc/profile-a-l/0ad.profile
+++ b/etc/profile-a-l/0ad.profile
@@ -16,6 +16,7 @@ include disable-exec.inc
16include disable-interpreters.inc 16include disable-interpreters.inc
17include disable-passwdmgr.inc 17include disable-passwdmgr.inc
18include disable-programs.inc 18include disable-programs.inc
19include disable-xdg.inc
19 20
20mkdir ${HOME}/.cache/0ad 21mkdir ${HOME}/.cache/0ad
21mkdir ${HOME}/.config/0ad 22mkdir ${HOME}/.config/0ad
@@ -40,6 +41,7 @@ nou2f
40novideo 41novideo
41protocol unix,inet,inet6 42protocol unix,inet,inet6
42seccomp 43seccomp
44seccomp.block-secondary
43shell none 45shell none
44tracelog 46tracelog
45 47
diff --git a/etc/profile-a-l/baobab.profile b/etc/profile-a-l/baobab.profile
index 3937e1966..4401c9dfd 100644
--- a/etc/profile-a-l/baobab.profile
+++ b/etc/profile-a-l/baobab.profile
@@ -30,6 +30,7 @@ nou2f
30novideo 30novideo
31protocol unix 31protocol unix
32seccomp 32seccomp
33seccomp.block-secondary
33shell none 34shell none
34tracelog 35tracelog
35 36
diff --git a/etc/profile-a-l/bijiben.profile b/etc/profile-a-l/bijiben.profile
index c1c338536..dbde3e4de 100644
--- a/etc/profile-a-l/bijiben.profile
+++ b/etc/profile-a-l/bijiben.profile
@@ -41,6 +41,7 @@ nou2f
41novideo 41novideo
42protocol unix 42protocol unix
43seccomp 43seccomp
44seccomp.block-secondary
44shell none 45shell none
45tracelog 46tracelog
46 47
diff --git a/etc/profile-a-l/celluloid.profile b/etc/profile-a-l/celluloid.profile
index 8bf086ab4..56709a466 100644
--- a/etc/profile-a-l/celluloid.profile
+++ b/etc/profile-a-l/celluloid.profile
@@ -46,6 +46,7 @@ noroot
46nou2f 46nou2f
47protocol unix,inet,inet6 47protocol unix,inet,inet6
48seccomp 48seccomp
49seccomp.block-secondary
49shell none 50shell none
50tracelog 51tracelog
51 52
diff --git a/etc/profile-a-l/dconf-editor.profile b/etc/profile-a-l/dconf-editor.profile
index d6541850d..b41a73916 100644
--- a/etc/profile-a-l/dconf-editor.profile
+++ b/etc/profile-a-l/dconf-editor.profile
@@ -35,6 +35,7 @@ nou2f
35novideo 35novideo
36protocol unix 36protocol unix
37seccomp 37seccomp
38seccomp.block-secondary
38shell none 39shell none
39tracelog 40tracelog
40 41
diff --git a/etc/profile-a-l/dia.profile b/etc/profile-a-l/dia.profile
index 52bf1c7f8..e409eb044 100644
--- a/etc/profile-a-l/dia.profile
+++ b/etc/profile-a-l/dia.profile
@@ -9,16 +9,24 @@ include globals.local
9noblacklist ${HOME}/.dia 9noblacklist ${HOME}/.dia
10noblacklist ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11 11
12include allow-python2.inc
13include allow-python3.inc
14
12include disable-common.inc 15include disable-common.inc
13include disable-devel.inc 16include disable-devel.inc
14include disable-exec.inc 17include disable-exec.inc
15include allow-python2.inc
16include allow-python3.inc
17include disable-interpreters.inc 18include disable-interpreters.inc
18include disable-passwdmgr.inc 19include disable-passwdmgr.inc
19include disable-programs.inc 20include disable-programs.inc
20include disable-xdg.inc 21include disable-xdg.inc
21 22
23#mkdir ${HOME}/.dia
24#whitelist ${HOME}/.dia
25#whitelist ${DOCUMENTS}
26#include whitelist-common.inc
27whitelist /usr/share/dia
28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc
22include whitelist-var-common.inc 30include whitelist-var-common.inc
23 31
24apparmor 32apparmor
@@ -36,6 +44,7 @@ novideo
36protocol unix 44protocol unix
37seccomp 45seccomp
38shell none 46shell none
47tracelog
39 48
40disable-mnt 49disable-mnt
41#private-bin dia 50#private-bin dia
diff --git a/etc/profile-a-l/eo-common.profile b/etc/profile-a-l/eo-common.profile
index e8b49a395..e059f3b74 100644
--- a/etc/profile-a-l/eo-common.profile
+++ b/etc/profile-a-l/eo-common.profile
@@ -27,6 +27,7 @@ apparmor
27caps.drop all 27caps.drop all
28ipc-namespace 28ipc-namespace
29machine-id 29machine-id
30net none
30no3d 31no3d
31nodvd 32nodvd
32nogroups 33nogroups
@@ -38,6 +39,7 @@ nou2f
38novideo 39novideo
39protocol unix,netlink 40protocol unix,netlink
40seccomp 41seccomp
42seccomp.block-secondary
41shell none 43shell none
42tracelog 44tracelog
43 45
diff --git a/etc/profile-a-l/evince.profile b/etc/profile-a-l/evince.profile
index 77a48f0ba..c0c16e929 100644
--- a/etc/profile-a-l/evince.profile
+++ b/etc/profile-a-l/evince.profile
@@ -41,6 +41,7 @@ nou2f
41novideo 41novideo
42protocol unix 42protocol unix
43seccomp 43seccomp
44seccomp.block-secondary
44shell none 45shell none
45tracelog 46tracelog
46 47
diff --git a/etc/profile-a-l/ffmpeg.profile b/etc/profile-a-l/ffmpeg.profile
index fb5c9ee57..c6e9ba095 100644
--- a/etc/profile-a-l/ffmpeg.profile
+++ b/etc/profile-a-l/ffmpeg.profile
@@ -41,6 +41,7 @@ novideo
41protocol inet,inet6 41protocol inet,inet6
42# allow set_mempolicy, which is required to encode using libx265 42# allow set_mempolicy, which is required to encode using libx265
43seccomp !set_mempolicy 43seccomp !set_mempolicy
44seccomp.block-secondary
44shell none 45shell none
45tracelog 46tracelog
46 47
diff --git a/etc/profile-a-l/file-roller.profile b/etc/profile-a-l/file-roller.profile
index 745b8b8e9..2a1eb2001 100644
--- a/etc/profile-a-l/file-roller.profile
+++ b/etc/profile-a-l/file-roller.profile
@@ -34,6 +34,7 @@ nou2f
34novideo 34novideo
35protocol unix 35protocol unix
36seccomp 36seccomp
37seccomp.block-secondary
37shell none 38shell none
38tracelog 39tracelog
39 40
diff --git a/etc/profile-a-l/firefox-common.profile b/etc/profile-a-l/firefox-common.profile
index 7c343c26d..fe0a27828 100644
--- a/etc/profile-a-l/firefox-common.profile
+++ b/etc/profile-a-l/firefox-common.profile
@@ -27,6 +27,7 @@ whitelist ${DOWNLOADS}
27whitelist ${HOME}/.pki 27whitelist ${HOME}/.pki
28whitelist ${HOME}/.local/share/pki 28whitelist ${HOME}/.local/share/pki
29include whitelist-common.inc 29include whitelist-common.inc
30include whitelist-runuser-common.inc
30include whitelist-var-common.inc 31include whitelist-var-common.inc
31 32
32apparmor 33apparmor
diff --git a/etc/profile-a-l/flameshot.profile b/etc/profile-a-l/flameshot.profile
index 357354e70..851a7c747 100644
--- a/etc/profile-a-l/flameshot.profile
+++ b/etc/profile-a-l/flameshot.profile
@@ -45,6 +45,7 @@ nou2f
45novideo 45novideo
46protocol unix,inet,inet6 46protocol unix,inet,inet6
47seccomp 47seccomp
48seccomp.block-secondary
48shell none 49shell none
49tracelog 50tracelog
50 51
diff --git a/etc/profile-a-l/frogatto.profile b/etc/profile-a-l/frogatto.profile
index 653272499..23d259337 100644
--- a/etc/profile-a-l/frogatto.profile
+++ b/etc/profile-a-l/frogatto.profile
@@ -36,6 +36,7 @@ nou2f
36novideo 36novideo
37protocol unix 37protocol unix
38seccomp 38seccomp
39seccomp.block-secondary
39shell none 40shell none
40tracelog 41tracelog
41 42
diff --git a/etc/profile-a-l/gapplication.profile b/etc/profile-a-l/gapplication.profile
index 74b468020..e339f6abb 100644
--- a/etc/profile-a-l/gapplication.profile
+++ b/etc/profile-a-l/gapplication.profile
@@ -38,6 +38,7 @@ nou2f
38novideo 38novideo
39protocol unix 39protocol unix
40seccomp 40seccomp
41seccomp.block-secondary
41shell none 42shell none
42tracelog 43tracelog
43x11 none 44x11 none
diff --git a/etc/profile-a-l/gedit.profile b/etc/profile-a-l/gedit.profile
index 17b7ad563..30251fbe5 100644
--- a/etc/profile-a-l/gedit.profile
+++ b/etc/profile-a-l/gedit.profile
@@ -37,6 +37,7 @@ nou2f
37novideo 37novideo
38protocol unix 38protocol unix
39seccomp 39seccomp
40seccomp.block-secondary
40shell none 41shell none
41tracelog 42tracelog
42 43
diff --git a/etc/profile-a-l/gfeeds.profile b/etc/profile-a-l/gfeeds.profile
index d97ab530b..b8d1b9608 100644
--- a/etc/profile-a-l/gfeeds.profile
+++ b/etc/profile-a-l/gfeeds.profile
@@ -49,6 +49,7 @@ nou2f
49novideo 49novideo
50protocol unix,inet,inet6 50protocol unix,inet,inet6
51seccomp 51seccomp
52seccomp.block-secondary
52shell none 53shell none
53tracelog 54tracelog
54 55
diff --git a/etc/profile-a-l/ghostwriter.profile b/etc/profile-a-l/ghostwriter.profile
index 5bb410278..c15174815 100644
--- a/etc/profile-a-l/ghostwriter.profile
+++ b/etc/profile-a-l/ghostwriter.profile
@@ -26,6 +26,7 @@ whitelist /usr/share/texlive
26whitelist /usr/share/pandoc* 26whitelist /usr/share/pandoc*
27include whitelist-runuser-common.inc 27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc
29 30
30apparmor 31apparmor
31caps.drop all 32caps.drop all
@@ -41,6 +42,7 @@ nou2f
41novideo 42novideo
42protocol unix,inet,inet6,netlink 43protocol unix,inet,inet6,netlink
43seccomp !chroot 44seccomp !chroot
45seccomp.block-secondary
44shell none 46shell none
45#tracelog -- breaks 47#tracelog -- breaks
46 48
diff --git a/etc/profile-a-l/gitg.profile b/etc/profile-a-l/gitg.profile
index 71b8e9b11..3d80c1ed2 100644
--- a/etc/profile-a-l/gitg.profile
+++ b/etc/profile-a-l/gitg.profile
@@ -45,6 +45,7 @@ nou2f
45novideo 45novideo
46protocol unix,inet,inet6 46protocol unix,inet,inet6
47seccomp 47seccomp
48seccomp.block-secondary
48shell none 49shell none
49tracelog 50tracelog
50 51
diff --git a/etc/profile-a-l/gnome-calculator.profile b/etc/profile-a-l/gnome-calculator.profile
index ceb01f2a0..7780dfa65 100644
--- a/etc/profile-a-l/gnome-calculator.profile
+++ b/etc/profile-a-l/gnome-calculator.profile
@@ -38,6 +38,7 @@ nou2f
38novideo 38novideo
39protocol unix,inet,inet6 39protocol unix,inet,inet6
40seccomp 40seccomp
41seccomp.block-secondary
41shell none 42shell none
42tracelog 43tracelog
43 44
diff --git a/etc/profile-a-l/gnome-calendar.profile b/etc/profile-a-l/gnome-calendar.profile
index 3e815234c..9927fb869 100644
--- a/etc/profile-a-l/gnome-calendar.profile
+++ b/etc/profile-a-l/gnome-calendar.profile
@@ -36,6 +36,7 @@ nou2f
36novideo 36novideo
37protocol unix,inet,inet6 37protocol unix,inet,inet6
38seccomp 38seccomp
39seccomp.block-secondary
39shell none 40shell none
40tracelog 41tracelog
41 42
diff --git a/etc/profile-a-l/gnome-characters.profile b/etc/profile-a-l/gnome-characters.profile
index f4f3ae2d7..4d53a67dd 100644
--- a/etc/profile-a-l/gnome-characters.profile
+++ b/etc/profile-a-l/gnome-characters.profile
@@ -39,6 +39,7 @@ nou2f
39novideo 39novideo
40protocol unix 40protocol unix
41seccomp 41seccomp
42seccomp.block-secondary
42shell none 43shell none
43tracelog 44tracelog
44 45
diff --git a/etc/profile-a-l/gnome-contacts.profile b/etc/profile-a-l/gnome-contacts.profile
index 7a38bdc8a..03b89e394 100644
--- a/etc/profile-a-l/gnome-contacts.profile
+++ b/etc/profile-a-l/gnome-contacts.profile
@@ -32,6 +32,7 @@ nou2f
32novideo 32novideo
33protocol unix,inet,inet6,netlink 33protocol unix,inet,inet6,netlink
34seccomp 34seccomp
35seccomp.block-secondary
35 36
36disable-mnt 37disable-mnt
37private-dev 38private-dev
diff --git a/etc/profile-a-l/gnome-hexgl.profile b/etc/profile-a-l/gnome-hexgl.profile
index 5ae7bbe01..bb5ef0eab 100644
--- a/etc/profile-a-l/gnome-hexgl.profile
+++ b/etc/profile-a-l/gnome-hexgl.profile
@@ -33,6 +33,7 @@ nou2f
33novideo 33novideo
34protocol unix 34protocol unix
35seccomp 35seccomp
36seccomp.block-secondary
36shell none 37shell none
37tracelog 38tracelog
38 39
diff --git a/etc/profile-a-l/gnome-keyring.profile b/etc/profile-a-l/gnome-keyring.profile
index ecbb74158..a0b9ef04e 100644
--- a/etc/profile-a-l/gnome-keyring.profile
+++ b/etc/profile-a-l/gnome-keyring.profile
@@ -9,8 +9,6 @@ include globals.local
9 9
10noblacklist ${HOME}/.gnupg 10noblacklist ${HOME}/.gnupg
11 11
12whitelist ${HOME}/.gnupg
13whitelist ${DOWNLOADS}
14include disable-common.inc 12include disable-common.inc
15include disable-devel.inc 13include disable-devel.inc
16include disable-exec.inc 14include disable-exec.inc
@@ -19,9 +17,15 @@ include disable-interpreters.inc
19include disable-programs.inc 17include disable-programs.inc
20include disable-xdg.inc 18include disable-xdg.inc
21 19
20mkdir ${HOME}/.gnupg
21whitelist ${HOME}/.gnupg
22whitelist ${DOWNLOADS}
23whitelist ${RUNUSER}/gnupg
24whitelist ${RUNUSER}/keyring
22whitelist /usr/share/gnupg 25whitelist /usr/share/gnupg
23whitelist /usr/share/gnupg2 26whitelist /usr/share/gnupg2
24include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 30include whitelist-var-common.inc
27 31
@@ -41,6 +45,7 @@ nou2f
41novideo 45novideo
42protocol unix,inet,inet6 46protocol unix,inet,inet6
43seccomp 47seccomp
48seccomp.block-secondary
44shell none 49shell none
45tracelog 50tracelog
46 51
@@ -52,6 +57,6 @@ private-dev
52private-tmp 57private-tmp
53 58
54# dbus-user none 59# dbus-user none
55# dbus-system none 60dbus-system none
56 61
57memory-deny-write-execute 62memory-deny-write-execute
diff --git a/etc/profile-a-l/gnome-latex.profile b/etc/profile-a-l/gnome-latex.profile
index 11d184bc6..87376da40 100644
--- a/etc/profile-a-l/gnome-latex.profile
+++ b/etc/profile-a-l/gnome-latex.profile
@@ -41,6 +41,7 @@ nou2f
41novideo 41novideo
42protocol unix 42protocol unix
43seccomp 43seccomp
44seccomp.block-secondary
44shell none 45shell none
45tracelog 46tracelog
46 47
diff --git a/etc/profile-a-l/gnome-maps.profile b/etc/profile-a-l/gnome-maps.profile
index eb0030dda..23629df95 100644
--- a/etc/profile-a-l/gnome-maps.profile
+++ b/etc/profile-a-l/gnome-maps.profile
@@ -54,6 +54,7 @@ nou2f
54novideo 54novideo
55protocol unix,inet,inet6 55protocol unix,inet,inet6
56seccomp 56seccomp
57seccomp.block-secondary
57shell none 58shell none
58tracelog 59tracelog
59 60
diff --git a/etc/profile-a-l/gnome-passwordsafe.profile b/etc/profile-a-l/gnome-passwordsafe.profile
index ed430b654..073de47b9 100644
--- a/etc/profile-a-l/gnome-passwordsafe.profile
+++ b/etc/profile-a-l/gnome-passwordsafe.profile
@@ -43,6 +43,7 @@ nou2f
43novideo 43novideo
44protocol unix 44protocol unix
45seccomp 45seccomp
46seccomp.block-secondary
46shell none 47shell none
47tracelog 48tracelog
48 49
diff --git a/etc/profile-a-l/gnome-photos.profile b/etc/profile-a-l/gnome-photos.profile
index 2af406af9..65cc23b5f 100644
--- a/etc/profile-a-l/gnome-photos.profile
+++ b/etc/profile-a-l/gnome-photos.profile
@@ -33,6 +33,7 @@ nou2f
33novideo 33novideo
34protocol unix 34protocol unix
35seccomp 35seccomp
36seccomp.block-secondary
36shell none 37shell none
37tracelog 38tracelog
38 39
diff --git a/etc/profile-a-l/gnome-screenshot.profile b/etc/profile-a-l/gnome-screenshot.profile
index 82fb1b658..2534eed5a 100644
--- a/etc/profile-a-l/gnome-screenshot.profile
+++ b/etc/profile-a-l/gnome-screenshot.profile
@@ -35,6 +35,7 @@ nou2f
35novideo 35novideo
36protocol unix 36protocol unix
37seccomp 37seccomp
38seccomp.block-secondary
38shell none 39shell none
39tracelog 40tracelog
40 41
diff --git a/etc/profile-a-l/gnome-sound-recorder.profile b/etc/profile-a-l/gnome-sound-recorder.profile
index a64ec25a9..2e063ebfe 100644
--- a/etc/profile-a-l/gnome-sound-recorder.profile
+++ b/etc/profile-a-l/gnome-sound-recorder.profile
@@ -33,6 +33,7 @@ nou2f
33novideo 33novideo
34protocol unix 34protocol unix
35seccomp 35seccomp
36seccomp.block-secondary
36shell none 37shell none
37tracelog 38tracelog
38 39
diff --git a/etc/profile-a-l/gnome-weather.profile b/etc/profile-a-l/gnome-weather.profile
index a181f1b9e..beed92a7d 100644
--- a/etc/profile-a-l/gnome-weather.profile
+++ b/etc/profile-a-l/gnome-weather.profile
@@ -37,6 +37,7 @@ nou2f
37novideo 37novideo
38protocol unix,inet,inet6 38protocol unix,inet,inet6
39seccomp 39seccomp
40seccomp.block-secondary
40shell none 41shell none
41tracelog 42tracelog
42 43
diff --git a/etc/profile-a-l/gnome_games-common.profile b/etc/profile-a-l/gnome_games-common.profile
index c46fbc1d9..56ed7a436 100644
--- a/etc/profile-a-l/gnome_games-common.profile
+++ b/etc/profile-a-l/gnome_games-common.profile
@@ -34,6 +34,7 @@ nou2f
34novideo 34novideo
35protocol unix 35protocol unix
36seccomp 36seccomp
37seccomp.block-secondary
37shell none 38shell none
38tracelog 39tracelog
39 40
diff --git a/etc/profile-a-l/gucharmap.profile b/etc/profile-a-l/gucharmap.profile
index c0254b5ec..3df42d209 100644
--- a/etc/profile-a-l/gucharmap.profile
+++ b/etc/profile-a-l/gucharmap.profile
@@ -35,6 +35,7 @@ nou2f
35novideo 35novideo
36protocol unix 36protocol unix
37seccomp 37seccomp
38seccomp.block-secondary
38shell none 39shell none
39tracelog 40tracelog
40 41
diff --git a/etc/profile-a-l/keepassxc.profile b/etc/profile-a-l/keepassxc.profile
index 06447c3e6..58db056b2 100644
--- a/etc/profile-a-l/keepassxc.profile
+++ b/etc/profile-a-l/keepassxc.profile
@@ -55,6 +55,7 @@ nou2f
55novideo 55novideo
56protocol unix,netlink 56protocol unix,netlink
57seccomp 57seccomp
58seccomp.block-secondary
58shell none 59shell none
59tracelog 60tracelog
60 61
diff --git a/etc/profile-a-l/libreoffice.profile b/etc/profile-a-l/libreoffice.profile
index f9c92f6f6..031f0e19f 100644
--- a/etc/profile-a-l/libreoffice.profile
+++ b/etc/profile-a-l/libreoffice.profile
@@ -43,6 +43,8 @@ shell none
43# comment tracelog when using the ubuntu 18.04/debian 10 apparmor profile 43# comment tracelog when using the ubuntu 18.04/debian 10 apparmor profile
44tracelog 44tracelog
45 45
46#private-bin libreoffice,sh,uname,dirname,grep,sed,basename,ls
47private-cache
46private-dev 48private-dev
47private-tmp 49private-tmp
48 50
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-06-26 08:05:49 +0000