Refactor Transmission profiles (#2516)

* Harden transmission-cli.profile

* Harden transmission-gtk.profile

* Harden transmission-qt.profile

* Harden transmission-show.profile

* Create transmission-create.profile

* Create transmission-daemon.profile

* Create transmission-edit.profile

* Create transmission-remote.profile

* Create transmission-remote-cli.profile

* Create transmission-remote-gtk.profile

* Fix spacing in transmission-remote-cli.profile

* Add transmission-daemon to firecfg

1 files changed, 44 insertions, 0 deletions

diff --git a/etc/transmission-remote.profile b/etc/transmission-remote.profile
new file mode 100644
index 000000000..7e6f67317
--- /dev/null
+++ b/etc/transmission-remote.profile
@@ -0,0 +1,44 @@
+# Firejail profile for transmission-remote
+# Description: A remote control utility for transmission-daemon (CLI)
+# This file is overwritten after every install/update
+quiet
+# Persistent local customizations
+include transmission-remote.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.cache/transmission
+noblacklist ${HOME}/.config/transmission
+
+include disable-common.inc
+include disable-devel.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+
+apparmor
+caps.drop all
+machine-id
+net none
+nodbus
+nodvd
+nonewprivs
+noroot
+nosound
+notv
+nou2f
+novideo
+protocol unix
+seccomp
+shell none
+tracelog
+
+# private-bin transmission-remote
+private-dev
+private-etc alternatives
+private-lib
+private-tmp
+
+memory-deny-write-execute
+noexec ${HOME}
+noexec /tmp