Refactor transmission profiles (#2920)

* Refactor transmission-cli

* Create transmission-common.profile

* Refactor transmission-create

* Refactor transmission-daemon

* Refactor transmission-edit

* Refactor transmission-gtk

* Refactor transmission-qt

* Refactor transmission-remote-cli

* Refactor transmission-remote-gtk

* Refactor transmission-remote

* Refactor transmission-show

1 files changed, 11 insertions, 32 deletions

diff --git a/etc/transmission-daemon.profile b/etc/transmission-daemon.profile
index 9a6052ada..1c092ad17 100644
--- a/etc/transmission-daemon.profile
+++ b/etc/transmission-daemon.profile
@@ -5,40 +5,19 @@ quiet
 # Persistent local customizations
 include transmission-daemon.local
 # Persistent global definitions
-include globals.local
+# added by included profile
+#include globals.local
 
-noblacklist ${HOME}/.cache/transmission
-noblacklist ${HOME}/.config/transmission
+whitelist /var/lib/transmission
 
-include disable-common.inc
-include disable-devel.inc
-include disable-exec.inc
-include disable-interpreters.inc
-include disable-passwdmgr.inc
-include disable-programs.inc
+caps.keep ipc_lock,net_bind_service,setgid,setuid,sys_chroot
 
-apparmor
-caps.drop all
-machine-id
-netfilter
-nodbus
-nodvd
-nogroups
-nonewprivs
-noroot
-nosound
-notv
-nou2f
-novideo
-protocol inet,inet6
-seccomp
-shell none
-tracelog
-
-# private-bin transmission-daemon
-private-dev
+#private-bin transmission-daemon
 private-etc alternatives,ca-certificates,crypto-policies,nsswitch.conf,pki,resolv.conf,ssl
-private-lib
-private-tmp
 
-memory-deny-write-execute
+read-write /var/lib/transmission
+writable-var-log
+writable-run-user
+
+# Redirect
+include transmission-common.profile