aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/sqlitebrowser.profile
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
commit018d75775eab4a0f045949a9d069c57686ca2686 (patch)
treeaac3a1a65cca0d4875795c55109a5c3e35efdefb /etc/profile-m-z/sqlitebrowser.profile
parentsmall fixes (diff)
downloadfirejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.gz
firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.zst
firejail-018d75775eab4a0f045949a9d069c57686ca2686.zip
reorganize github etc directory
Diffstat (limited to 'etc/profile-m-z/sqlitebrowser.profile')
-rw-r--r--etc/profile-m-z/sqlitebrowser.profile49
1 files changed, 49 insertions, 0 deletions
diff --git a/etc/profile-m-z/sqlitebrowser.profile b/etc/profile-m-z/sqlitebrowser.profile
new file mode 100644
index 000000000..017120811
--- /dev/null
+++ b/etc/profile-m-z/sqlitebrowser.profile
@@ -0,0 +1,49 @@
1# Firejail profile for sqlitebrowser
2# Description: GUI editor for SQLite databases
3# This file is overwritten after every install/update
4# Persistent local customizations
5include sqlitebrowser.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/sqlitebrowser
10noblacklist ${DOCUMENTS}
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18include disable-xdg.inc
19
20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc
22
23apparmor
24caps.drop all
25ipc-namespace
26netfilter
27nodvd
28nogroups
29nonewprivs
30noroot
31nosound
32notv
33nou2f
34novideo
35protocol unix,inet,inet6,netlink
36seccomp
37shell none
38
39private-bin sqlitebrowser
40private-cache
41private-dev
42private-etc alternatives,ca-certificates,crypto-policies,fonts,group,machine-id,passwd,pki,ssl
43private-tmp
44
45# breaks proxy creation
46# dbus-user none
47# dbus-system none
48
49#memory-deny-write-execute - breaks on Arch (see issue #1803)