aboutsummaryrefslogtreecommitdiffstats
path: root/etc/seahorse-tool.profile
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2019-03-16 17:49:01 +0000
committerLibravatar GitHub <noreply@github.com>2019-03-16 17:49:01 +0000
commit0ea4ed8408f6fc506f9e4bef0f9e94fe14ea8d9c (patch)
treef95e3eb3c3e9680ecab513c8d6be3736d372c3c5 /etc/seahorse-tool.profile
parentFix assogiate's private-bin (#2603) (diff)
downloadfirejail-0ea4ed8408f6fc506f9e4bef0f9e94fe14ea8d9c.tar.gz
firejail-0ea4ed8408f6fc506f9e4bef0f9e94fe14ea8d9c.tar.zst
firejail-0ea4ed8408f6fc506f9e4bef0f9e94fe14ea8d9c.zip
Seahorse revisited (#2600)
* Refactor seahorse into a whitelist profile * Refactor seahorse-tool as a whitelist profile * Create seahorse-daemon.profile * Add seahorse-daemon to firecfg * Drop blacklist /tmp/.X11-unix from seahorse.profile Thanks to @rusty-snake for pointing out blacklisting /tmp/.X11-unix is ridiculous for GUI's. * Add non-GUI option to seahorse-daemon
Diffstat (limited to 'etc/seahorse-tool.profile')
-rw-r--r--etc/seahorse-tool.profile13
1 files changed, 2 insertions, 11 deletions
diff --git a/etc/seahorse-tool.profile b/etc/seahorse-tool.profile
index 2e792c8e0..96f365a4b 100644
--- a/etc/seahorse-tool.profile
+++ b/etc/seahorse-tool.profile
@@ -7,20 +7,11 @@ include seahorse-tool.local
7# added by included profile 7# added by included profile
8#include globals.local 8#include globals.local
9 9
10# dconf 10noblacklist ${DOWNLOADS}
11noblacklist ${HOME}/.config/dconf
12 11
13include disable-exec.inc
14include disable-xdg.inc
15include whitelist-var-common.inc
16
17apparmor
18ipc-namespace
19
20disable-mnt
21private-tmp 12private-tmp
22 13
23memory-deny-write-execute 14memory-deny-write-execute
24 15
25# Redirect 16# Redirect
26include gpg.profile 17include seahorse.profile