aboutsummaryrefslogtreecommitdiffstats
path: root/etc/cherrytree.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/cherrytree.profile')
-rw-r--r--etc/cherrytree.profile13
1 files changed, 2 insertions, 11 deletions
diff --git a/etc/cherrytree.profile b/etc/cherrytree.profile
index 7c324a34b..139dec8ec 100644
--- a/etc/cherrytree.profile
+++ b/etc/cherrytree.profile
@@ -1,6 +1,7 @@
1# cherrytree note taking application 1# cherrytree note taking application
2noblacklist /usr/bin/python2* 2noblacklist /usr/bin/python2*
3noblacklist /usr/lib/python3* 3noblacklist /usr/lib/python3*
4noblacklist ${HOME}/.config/cherrytree
4include /etc/firejail/disable-common.inc 5include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-programs.inc 6include /etc/firejail/disable-programs.inc
6include /etc/firejail/disable-devel.inc 7include /etc/firejail/disable-devel.inc
@@ -8,20 +9,10 @@ include /etc/firejail/disable-passwdmgr.inc
8 9
9caps.drop all 10caps.drop all
10netfilter 11netfilter
12nogroups
11nonewprivs 13nonewprivs
12noroot 14noroot
13nosound 15nosound
14seccomp 16seccomp
15protocol unix,inet,inet6,netlink 17protocol unix,inet,inet6,netlink
16tracelog 18tracelog
17
18include /etc/firejail/whitelist-common.inc
19
20# no private-bin support for various reasons:
21#10:25:34 exec 11249 (root) NEW SANDBOX: /usr/bin/firejail /usr/bin/cherrytree
22#10:25:34 exec 11252 (netblue) /bin/bash -c "/usr/bin/cherrytree"
23#10:25:34 exec 11252 (netblue) /usr/bin/python /usr/bin/cherrytree
24#10:25:34 exec 11253 (netblue) sh -c /sbin/ldconfig -p 2>/dev/null
25#10:25:34 exec 11255 (netblue) sh -c if type gcc >/dev/null 2>&1; then CC=gcc; elif type cc >/dev/null 2>&1; then CC=cc;else exit 10; fi;LANG=C LC_ALL=C $CC -Wl,-t -o /tmp/tmpiYr44S 2>&1 -llibc
26# it requires acces to browser to show the online help
27# it doesn't play nicely with expect