aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar CaseOf <CaseOf@users.noreply.github.com>2022-01-06 22:17:01 +0100
committerLibravatar CaseOf <CaseOf@users.noreply.github.com>2022-01-06 22:53:08 +0100
commit60599691bb404d34666b4bfd381eb977ecf50fbb (patch)
tree50b2776c80825372e7947dd813a19d1634f27329 /etc
parentadd notable to 'New profiles' section (diff)
downloadfirejail-60599691bb404d34666b4bfd381eb977ecf50fbb.tar.gz
firejail-60599691bb404d34666b4bfd381eb977ecf50fbb.tar.zst
firejail-60599691bb404d34666b4bfd381eb977ecf50fbb.zip
Create seafile-applet.profile
Diffstat (limited to 'etc')
-rw-r--r--etc/inc/disable-programs.inc2
-rw-r--r--etc/profile-m-z/seafile-applet.profile62
2 files changed, 64 insertions, 0 deletions
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc
index 02407f54f..a13d5a4d3 100644
--- a/etc/inc/disable-programs.inc
+++ b/etc/inc/disable-programs.inc
@@ -16,6 +16,7 @@ blacklist ${HOME}/.Natron
16blacklist ${HOME}/.PlayOnLinux 16blacklist ${HOME}/.PlayOnLinux
17blacklist ${HOME}/.PyCharm* 17blacklist ${HOME}/.PyCharm*
18blacklist ${HOME}/.Sayonara 18blacklist ${HOME}/.Sayonara
19blacklist ${HOME}/Seafile/.seafile-data
19blacklist ${HOME}/.Steam 20blacklist ${HOME}/.Steam
20blacklist ${HOME}/.Steampath 21blacklist ${HOME}/.Steampath
21blacklist ${HOME}/.Steampid 22blacklist ${HOME}/.Steampid
@@ -312,6 +313,7 @@ blacklist ${HOME}/.config/Riot
312blacklist ${HOME}/.config/Rocket.Chat 313blacklist ${HOME}/.config/Rocket.Chat
313blacklist ${HOME}/.config/RogueLegacy 314blacklist ${HOME}/.config/RogueLegacy
314blacklist ${HOME}/.config/RogueLegacyStorageContainer 315blacklist ${HOME}/.config/RogueLegacyStorageContainer
316blacklist ${HOME}/.config/Seafile
315blacklist ${HOME}/.config/Signal 317blacklist ${HOME}/.config/Signal
316blacklist ${HOME}/.config/Sinew Software Systems 318blacklist ${HOME}/.config/Sinew Software Systems
317blacklist ${HOME}/.config/Slack 319blacklist ${HOME}/.config/Slack
diff --git a/etc/profile-m-z/seafile-applet.profile b/etc/profile-m-z/seafile-applet.profile
new file mode 100644
index 000000000..79e072475
--- /dev/null
+++ b/etc/profile-m-z/seafile-applet.profile
@@ -0,0 +1,62 @@
1# Firejail profile for Seafile
2# Description: Seafile desktop client.
3# This file is overwritten after every install/update
4# Persistent local customizations
5include seafile-applet.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/Seafile
10noblacklist ${HOME}/Seafile/.seafile-data
11
12blacklist /usr/libexec
13
14include disable-common.inc
15include disable-devel.inc
16include disable-exec.inc
17include disable-interpreters.inc
18include disable-programs.inc
19include disable-xdg.inc
20
21mkdir ${HOME}/.ccnet
22mkdir ${HOME}/.config/Seafile
23mkdir ${HOME}/Seafile
24whitelist ${HOME}/.ccnet
25whitelist ${HOME}/.config/Seafile
26whitelist ${HOME}/Seafile
27
28include whitelist-common.inc
29include whitelist-run-common.inc
30include whitelist-runuser-common.inc
31include whitelist-usr-share-common.inc
32include whitelist-var-common.inc
33
34apparmor
35caps.drop all
36netfilter
37nodvd
38nogroups
39noinput
40nonewprivs
41noprinters
42noroot
43nosound
44notv
45nou2f
46novideo
47protocol unix,inet,inet6
48seccomp
49seccomp.block-secondary
50shell none
51tracelog
52
53disable-mnt
54private-bin seaf-cli,seaf-daemon,seafile-applet
55private-cache
56private-dev
57private-etc alternatives,ca-certificates,crypto-policies,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,nsswitch.conf,pki,protocols,resolv.conf,rpc,services,ssl
58#private-opt none
59private-tmp
60
61dbus-user none
62dbus-system none