aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--etc/disable-programs.inc1
-rw-r--r--etc/meteo-qt.profile53
-rw-r--r--src/firecfg/firecfg.config1
3 files changed, 55 insertions, 0 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index cd0cb1f2e..67348cb23 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -219,6 +219,7 @@ blacklist ${HOME}/.config/mana
219blacklist ${HOME}/.config/mate-calc 219blacklist ${HOME}/.config/mate-calc
220blacklist ${HOME}/.config/mate/eom 220blacklist ${HOME}/.config/mate/eom
221blacklist ${HOME}/.config/mate/mate-dictionary 221blacklist ${HOME}/.config/mate/mate-dictionary
222blacklist ${HOME}/.config/meteo-qt
222blacklist ${HOME}/.config/mfusion 223blacklist ${HOME}/.config/mfusion
223blacklist ${HOME}/.config/midori 224blacklist ${HOME}/.config/midori
224blacklist ${HOME}/.config/mono 225blacklist ${HOME}/.config/mono
diff --git a/etc/meteo-qt.profile b/etc/meteo-qt.profile
new file mode 100644
index 000000000..a769a97ec
--- /dev/null
+++ b/etc/meteo-qt.profile
@@ -0,0 +1,53 @@
1# Firejail profile for meteo-qt
2# Description: System tray application for weather status information
3# This file is overwritten after every install/update
4# Persistent local customizations
5include meteo-qt.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/autostart
10noblacklist ${HOME}/.config/meteo-qt
11
12# Allow python (blacklisted by disable-interpreters.inc)
13noblacklist ${PATH}/python3*
14noblacklist /usr/lib/python3*
15noblacklist /usr/local/lib/python3*
16
17include disable-common.inc
18include disable-devel.inc
19include disable-exec.inc
20include disable-interpreters.inc
21include disable-passwdmgr.inc
22include disable-programs.inc
23include disable-xdg.inc
24
25whitelist ${HOME}/.config/autostart
26mkdir ${HOME}/.config/meteo-qt
27whitelist ${HOME}/.config/meteo-qt
28include whitelist-common.inc
29include whitelist-var-common.inc
30
31caps.drop all
32netfilter
33nodbus
34nodvd
35nogroups
36nonewprivs
37noroot
38nosound
39notv
40nou2f
41novideo
42protocol unix,inet,inet6
43seccomp
44shell none
45tracelog
46
47disable-mnt
48private-bin meteo-qt,python*
49private-cache
50private-dev
51private-tmp
52
53memory-deny-write-execute
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 333cf58c0..daae6d25e 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -362,6 +362,7 @@ megaglest_editor
362meld 362meld
363mencoder 363mencoder
364mendeleydesktop 364mendeleydesktop
365meteo-qt
365midori 366midori
366min 367min
367minetest 368minetest