aboutsummaryrefslogtreecommitdiffstats
path: root/etc/gnome-books.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/gnome-books.profile')
-rw-r--r--etc/gnome-books.profile19
1 files changed, 9 insertions, 10 deletions
diff --git a/etc/gnome-books.profile b/etc/gnome-books.profile
index e36294930..60bd2f68d 100644
--- a/etc/gnome-books.profile
+++ b/etc/gnome-books.profile
@@ -1,19 +1,18 @@
1# Persistent global definitions go here 1# Firejail profile for gnome-books
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/gnome-books.local 4include /etc/firejail/gnome-books.local
7 5# Persistent global definitions
8# gnome-books profile 6include /etc/firejail/globals.local
9 7
10# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 8# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
9
11noblacklist ~/.cache/org.gnome.Books 10noblacklist ~/.cache/org.gnome.Books
12 11
13include /etc/firejail/disable-common.inc 12include /etc/firejail/disable-common.inc
14include /etc/firejail/disable-programs.inc
15include /etc/firejail/disable-devel.inc 13include /etc/firejail/disable-devel.inc
16include /etc/firejail/disable-passwdmgr.inc 14include /etc/firejail/disable-passwdmgr.inc
15include /etc/firejail/disable-programs.inc
17 16
18caps.drop all 17caps.drop all
19netfilter 18netfilter
@@ -29,9 +28,9 @@ shell none
29tracelog 28tracelog
30 29
31# private-bin gjs gnome-books 30# private-bin gjs gnome-books
32private-tmp
33private-dev 31private-dev
34#private-etc fonts 32# private-etc fonts
33private-tmp
35 34
36noexec ${HOME} 35noexec ${HOME}
37noexec /tmp 36noexec /tmp