keepass, keepassx, 7z profiles

3 files changed, 55 insertions, 0 deletions

diff --git a/etc/7z.profile b/etc/7z.profile
new file mode 100644
index 000000000..c9455317a
--- /dev/null
+++ b/etc/7z.profile
@@ -0,0 +1,10 @@
+# p7zip crompression tool profile
+quiet
+ignore noroot
+include /etc/firejail/default.profile
+tracelog
+net none
+shell none
+private-dev
+private-tmp
+nosound
diff --git a/etc/keepass.profile b/etc/keepass.profile
new file mode 100644
index 000000000..b2085f53d
--- /dev/null
+++ b/etc/keepass.profile
@@ -0,0 +1,22 @@
+# keepass password manager profile
+
+noblacklist ${HOME}/.config/keepass
+noblacklist ${HOME}/.keepass
+ 
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+nogroups
+nonewprivs
+noroot
+nosound
+protocol unix
+seccomp
+netfilter
+shell none
+
+private-tmp
+private-dev
diff --git a/etc/keepassx.profile b/etc/keepassx.profile
new file mode 100644
index 000000000..415160df3
--- /dev/null
+++ b/etc/keepassx.profile
@@ -0,0 +1,23 @@
+# keepassx password manager profile
+
+noblacklist ${HOME}/.config/keepassx
+noblacklist ${HOME}/.keepassx
+noblacklist ${HOME}/keepassx.kdbx
+ 
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+nogroups
+nonewprivs
+noroot
+nosound
+protocol unix
+seccomp
+netfilter
+shell none
+
+private-tmp
+private-dev