tighten mate-calc profile

1 files changed, 12 insertions, 1 deletions

diff --git a/etc/mate-calc.profile b/etc/mate-calc.profile
index caf3095a5..c59b2dcc7 100644
--- a/etc/mate-calc.profile
+++ b/etc/mate-calc.profile
@@ -12,8 +12,15 @@ include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
 
+whitelist ${HOME}/.cache/mate-calc
+whitelist ${HOME}/.config/caja
+whitelist ${HOME}/.config/gtk-3.0
+whitelist ${HOME}/.config/dconf
+whitelist ${HOME}./config/mate-menu
+whitelist ${HOME}/.themes
+
 caps.drop all
-netfilter
+net none
 no3d
 nodvd
 nogroups
@@ -27,8 +34,12 @@ seccomp
 shell none
 
 disable-mnt
+private-bin mate-calc,mate-calculator
+private-etc fonts
 private-dev
+private-opt none
 private-tmp
 
+memory-deny-write-execute
 noexec ${HOME}
 noexec /tmp