aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/system-log-common.profile
diff options
context:
space:
mode:
authorLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2023-09-23 00:59:07 -0300
committerLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2023-09-23 01:02:34 -0300
commitf5534fb600ea7200de1156d127548e6dfd366a8a (patch)
tree920cb32c97429559dec7daf9fe5f17cbf8513eb2 /etc/profile-m-z/system-log-common.profile
parentcreate fluffychat.profile (#6007) (diff)
downloadfirejail-f5534fb600ea7200de1156d127548e6dfd366a8a.tar.gz
firejail-f5534fb600ea7200de1156d127548e6dfd366a8a.tar.zst
firejail-f5534fb600ea7200de1156d127548e6dfd366a8a.zip
profiles: fix path of system-log-common.profile
This amends commit dd5539012 ("profiles: refactor log viewers (#5996)", 2023-09-23). Commands used: git mv \ etc/profile-m-z/profile-m-z/profile-m-z/system-log-common.profile \ etc/profile-m-z/system-log-common.profile rmdir etc/profile-m-z/profile-m-z/profile-m-z/ rmdir etc/profile-m-z/profile-m-z/
Diffstat (limited to 'etc/profile-m-z/system-log-common.profile')
-rw-r--r--etc/profile-m-z/system-log-common.profile60
1 files changed, 60 insertions, 0 deletions
diff --git a/etc/profile-m-z/system-log-common.profile b/etc/profile-m-z/system-log-common.profile
new file mode 100644
index 000000000..dda8bdc47
--- /dev/null
+++ b/etc/profile-m-z/system-log-common.profile
@@ -0,0 +1,60 @@
1# Firejail profile for system-log-common
2# Description: Common profile for GUI system log viewers
3# This file is overwritten after every install/update
4# Persistent local customizations
5include system-log-common.local
6# Persistent global definitions
7# added by caller profile
8#include globals.local
9
10include disable-common.inc
11include disable-devel.inc
12include disable-exec.inc
13include disable-interpreters.inc
14include disable-proc.inc
15include disable-programs.inc
16include disable-shell.inc
17include disable-xdg.inc
18
19whitelist /run/log/journal
20whitelist /var/log/journal
21include whitelist-common.inc
22include whitelist-run-common.inc
23include whitelist-runuser-common.inc
24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc
26
27apparmor
28caps.drop all
29ipc-namespace
30net none
31no3d
32nodvd
33#nogroups
34noinput
35nonewprivs
36noprinters
37#noroot
38nosound
39notv
40nou2f
41novideo
42protocol unix
43seccomp
44seccomp.block-secondary
45tracelog
46
47disable-mnt
48private-cache
49private-dev
50private-etc machine-id
51private-tmp
52
53dbus-user none
54dbus-system none
55
56restrict-namespaces
57# Add 'ignore read-only ${HOME}' to your system-log-common.local
58# if you export logs to a file under your ${HOME}.
59read-only ${HOME}
60writable-var-log