diff options
-rw-r--r-- | README.md | 2 | ||||
-rw-r--r-- | RELNOTES | 2 | ||||
-rw-r--r-- | etc/clamtk.profile | 28 | ||||
-rw-r--r-- | src/firecfg/firecfg.config | 1 |
4 files changed, 31 insertions, 2 deletions
@@ -167,4 +167,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe | |||
167 | ## New profiles | 167 | ## New profiles |
168 | Microsoft Office Online, riot-desktop, gnome-mpv, snox, gradio, standardnotes-desktop, | 168 | Microsoft Office Online, riot-desktop, gnome-mpv, snox, gradio, standardnotes-desktop, |
169 | shellcheck, patch, flameshot, rview, rvim, vimcat, vimdiff, vimpager, vimtutor, | 169 | shellcheck, patch, flameshot, rview, rvim, vimcat, vimdiff, vimpager, vimtutor, |
170 | xxd, Beaker, electrum | 170 | xxd, Beaker, electrum, clamtk |
@@ -16,7 +16,7 @@ firejail (0.9.56~rc1) baseline; urgency=low | |||
16 | * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio, | 16 | * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio, |
17 | * new profiles: standardnotes-desktop, shellcheck, patch, flameshot, | 17 | * new profiles: standardnotes-desktop, shellcheck, patch, flameshot, |
18 | * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd, | 18 | * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd, |
19 | * new profiles: Beaker, electrum | 19 | * new profiles: Beaker, electrum, clamtk |
20 | -- netblue30 <netblue30@yahoo.com> Sat, 11 Aug 2018 08:00:00 -0500 | 20 | -- netblue30 <netblue30@yahoo.com> Sat, 11 Aug 2018 08:00:00 -0500 |
21 | 21 | ||
22 | firejail (0.9.54) baseline; urgency=low | 22 | firejail (0.9.54) baseline; urgency=low |
diff --git a/etc/clamtk.profile b/etc/clamtk.profile new file mode 100644 index 000000000..d916381b2 --- /dev/null +++ b/etc/clamtk.profile | |||
@@ -0,0 +1,28 @@ | |||
1 | # Firejail profile for clamtk | ||
2 | # This file is overwritten after every install/update | ||
3 | # Persistent local customizations | ||
4 | include /etc/firejail/clamtk.local | ||
5 | # Persistent global definitions | ||
6 | include /etc/firejail/globals.local | ||
7 | |||
8 | caps.drop all | ||
9 | ipc-namespace | ||
10 | net none | ||
11 | no3d | ||
12 | nodbus | ||
13 | nodvd | ||
14 | nogroups | ||
15 | nonewprivs | ||
16 | noroot | ||
17 | nosound | ||
18 | notv | ||
19 | novideo | ||
20 | protocol unix | ||
21 | seccomp | ||
22 | shell none | ||
23 | |||
24 | private-dev | ||
25 | |||
26 | memory-deny-write-execute | ||
27 | noexec ${HOME} | ||
28 | noexec /tmp | ||
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index a33aaeb49..648470b27 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config | |||
@@ -77,6 +77,7 @@ cinelerra | |||
77 | clamdscan | 77 | clamdscan |
78 | clamdtop | 78 | clamdtop |
79 | clamscan | 79 | clamscan |
80 | clamtk | ||
80 | claws-mail | 81 | claws-mail |
81 | clementine | 82 | clementine |
82 | clipit | 83 | clipit |