Refactor Transmission profiles (#2516)

* Harden transmission-cli.profile

* Harden transmission-gtk.profile

* Harden transmission-qt.profile

* Harden transmission-show.profile

* Create transmission-create.profile

* Create transmission-daemon.profile

* Create transmission-edit.profile

* Create transmission-remote.profile

* Create transmission-remote-cli.profile

* Create transmission-remote-gtk.profile

* Fix spacing in transmission-remote-cli.profile

* Add transmission-daemon to firecfg

1 files changed, 45 insertions, 0 deletions

diff --git a/etc/transmission-daemon.profile b/etc/transmission-daemon.profile
new file mode 100644
index 000000000..c101e18b5
--- /dev/null
+++ b/etc/transmission-daemon.profile
@@ -0,0 +1,45 @@
+# Firejail profile for transmission-daemon
+# Description:  Fast, easy and free BitTorrent client (daemon)
+# This file is overwritten after every install/update
+quiet
+# Persistent local customizations
+include transmission-daemon.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.cache/transmission
+noblacklist ${HOME}/.config/transmission
+
+include disable-common.inc
+include disable-devel.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+
+apparmor
+caps.drop all
+machine-id
+netfilter
+nodbus
+nodvd
+nogroups
+nonewprivs
+noroot
+nosound
+notv
+nou2f
+novideo
+protocol inet,inet6
+seccomp
+shell none
+tracelog
+
+# private-bin transmission-daemon
+private-dev
+private-etc alternatives,ca-certificates,crypto-policies,nsswitch.conf,pki,resolv.conf,ssl
+private-lib
+private-tmp
+
+memory-deny-write-execute
+noexec ${HOME}
+noexec /tmp