aboutsummaryrefslogtreecommitdiffstats
path: root/etc/gnome-maps.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/gnome-maps.profile')
-rw-r--r--etc/gnome-maps.profile22
1 files changed, 11 insertions, 11 deletions
diff --git a/etc/gnome-maps.profile b/etc/gnome-maps.profile
index 8c7310fa9..1e60c4470 100644
--- a/etc/gnome-maps.profile
+++ b/etc/gnome-maps.profile
@@ -1,20 +1,21 @@
1# Persistent global definitions go here 1# Firejail profile for gnome-maps
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/gnome-maps.local 4include /etc/firejail/gnome-maps.local
7 5# Persistent global definitions
8# gnome-maps profile 6include /etc/firejail/globals.local
9 7
10# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 8# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
9
11noblacklist ${HOME}/.cache/champlain 10noblacklist ${HOME}/.cache/champlain
11
12include /etc/firejail/disable-common.inc 12include /etc/firejail/disable-common.inc
13include /etc/firejail/disable-programs.inc
14include /etc/firejail/disable-devel.inc 13include /etc/firejail/disable-devel.inc
15include /etc/firejail/disable-passwdmgr.inc 14include /etc/firejail/disable-passwdmgr.inc
15include /etc/firejail/disable-programs.inc
16 16
17caps.drop all 17caps.drop all
18netfilter
18nogroups 19nogroups
19nonewprivs 20nonewprivs
20noroot 21noroot
@@ -22,15 +23,14 @@ nosound
22novideo 23novideo
23protocol unix,inet,inet6 24protocol unix,inet,inet6
24seccomp 25seccomp
25netfilter
26shell none 26shell none
27tracelog 27tracelog
28 28
29disable-mnt
29# private-bin gjs gnome-maps 30# private-bin gjs gnome-maps
30private-tmp
31private-dev 31private-dev
32# private-etc fonts 32# private-etc fonts
33disable-mnt 33private-tmp
34 34
35noexec ${HOME} 35noexec ${HOME}
36noexec /tmp 36noexec /tmp