Add new profile for seahorse (#2491)

* Create seahorse.profile

* Create seahorse-tool.profile

* Add seahorse to firecfg

2 files changed, 53 insertions, 0 deletions

diff --git a/etc/seahorse-tool.profile b/etc/seahorse-tool.profile
new file mode 100644
index 000000000..bbab69162
--- /dev/null
+++ b/etc/seahorse-tool.profile
@@ -0,0 +1,28 @@
+# Firejail profile for seahorse-tool
+# Description: PGP encryption and signing
+# This file is overwritten after every install/update
+# Persistent local customizations
+include seahorse-tool.local
+# Persistent global definitions
+# added by included profile
+#include globals.local
+
+# dconf
+mkdir ${HOME}/.config/dconf
+whitelist ${HOME}/.config/dconf
+
+include disable-xdg.inc
+include whitelist-var-common.inc
+
+apparmor
+ipc-namespace
+
+disable-mnt
+private-tmp
+
+memory-deny-write-execute
+noexec ${HOME}
+noexec /tmp
+
+# Redirect
+include gpg.profile
diff --git a/etc/seahorse.profile b/etc/seahorse.profile
new file mode 100644
index 000000000..0bf3b89fd
--- /dev/null
+++ b/etc/seahorse.profile
@@ -0,0 +1,25 @@
+# Firejail profile for seahorse
+# Description: GNOME application for managing PGP keys
+# This file is overwritten after every install/update
+# Persistent local customizations
+include seahorse.local
+# Persistent global definitions
+# added by included profile
+#include globals.local
+
+# dconf
+mkdir ${HOME}/.config/dconf
+whitelist ${HOME}/.config/dconf
+
+# ssh
+noblacklist /etc/ssh
+noblacklist /tmp/ssh-*
+noblacklist ${HOME}/.ssh
+
+include whitelist-var-common.inc
+
+apparmor
+ipc-namespace
+
+# Redirect
+include gpg.profile