aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--etc/unf.profile55
-rw-r--r--src/firecfg/firecfg.config1
2 files changed, 56 insertions, 0 deletions
diff --git a/etc/unf.profile b/etc/unf.profile
new file mode 100644
index 000000000..ea08ff699
--- /dev/null
+++ b/etc/unf.profile
@@ -0,0 +1,55 @@
1# Firejail profile for unf
2# Description: UNixize Filename -- replace annoying anti-unix characters in filenames
3# This file is overwritten after every install/update
4quiet
5# Persistent local customizations
6include unf.local
7# Persistent global definitions
8include globals.local
9
10whitelist ${DOWNLOADS}
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18include disable-xdg.inc
19
20include whitelist-common.inc
21include whitelist-usr-share-common.inc
22include whitelist-var-common.inc
23
24apparmor
25caps.drop all
26hostname unf
27ipc-namespace
28machine-id
29net none
30no3d
31nodbus
32nodvd
33nogroups
34nonewprivs
35noroot
36nosound
37notv
38nou2f
39novideo
40protocol unix
41seccomp
42shell none
43tracelog
44x11 none
45
46disable-mnt
47private-bin unf
48private-cache
49?HAS_APPIMAGE: ignore private-dev
50private-dev
51private-etc alternatives
52private-lib libgcc_s.so.*
53private-tmp
54
55memory-deny-write-execute
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 3b61ef1b4..0326156a1 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -634,6 +634,7 @@ udiskie
634uefitool 634uefitool
635uget-gtk 635uget-gtk
636unbound 636unbound
637unf
637unknown-horizons 638unknown-horizons
638unzstd 639unzstd
639utox 640utox