diff options
Diffstat (limited to 'etc/gnome-photos.profile')
-rw-r--r-- | etc/gnome-photos.profile | 17 |
1 files changed, 9 insertions, 8 deletions
diff --git a/etc/gnome-photos.profile b/etc/gnome-photos.profile index 5a3ac53d8..2e3356607 100644 --- a/etc/gnome-photos.profile +++ b/etc/gnome-photos.profile | |||
@@ -2,21 +2,21 @@ | |||
2 | # Description: Access, organize and share your photos with GNOME | 2 | # Description: Access, organize and share your photos with GNOME |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | # Persistent local customizations | 4 | # Persistent local customizations |
5 | include /etc/firejail/gnome-photos.local | 5 | include gnome-photos.local |
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include /etc/firejail/globals.local | 7 | include globals.local |
8 | 8 | ||
9 | # when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them | 9 | # when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them |
10 | 10 | ||
11 | noblacklist ${HOME}/.local/share/gnome-photos | 11 | noblacklist ${HOME}/.local/share/gnome-photos |
12 | 12 | ||
13 | include /etc/firejail/disable-common.inc | 13 | include disable-common.inc |
14 | include /etc/firejail/disable-devel.inc | 14 | include disable-devel.inc |
15 | include /etc/firejail/disable-interpreters.inc | 15 | include disable-interpreters.inc |
16 | include /etc/firejail/disable-passwdmgr.inc | 16 | include disable-passwdmgr.inc |
17 | include /etc/firejail/disable-programs.inc | 17 | include disable-programs.inc |
18 | 18 | ||
19 | include /etc/firejail/whitelist-var-common.inc | 19 | include whitelist-var-common.inc |
20 | 20 | ||
21 | caps.drop all | 21 | caps.drop all |
22 | netfilter | 22 | netfilter |
@@ -26,6 +26,7 @@ nonewprivs | |||
26 | noroot | 26 | noroot |
27 | nosound | 27 | nosound |
28 | notv | 28 | notv |
29 | nou2f | ||
29 | protocol unix | 30 | protocol unix |
30 | seccomp | 31 | seccomp |
31 | shell none | 32 | shell none |