aboutsummaryrefslogtreecommitdiffstats
path: root/etc/gnome-weather.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/gnome-weather.profile')
-rw-r--r--etc/gnome-weather.profile21
1 files changed, 10 insertions, 11 deletions
diff --git a/etc/gnome-weather.profile b/etc/gnome-weather.profile
index 815fba7ca..514ef6f15 100644
--- a/etc/gnome-weather.profile
+++ b/etc/gnome-weather.profile
@@ -1,21 +1,21 @@
1# Persistent global definitions go here 1# Firejail profile for gnome-weather
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/gnome-weather.local 4include /etc/firejail/gnome-weather.local
7 5# Persistent global definitions
8# gnome-weather profile 6include /etc/firejail/globals.local
9 7
10# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 8# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
9
11noblacklist ~/.cache/libgweather 10noblacklist ~/.cache/libgweather
12 11
13include /etc/firejail/disable-common.inc 12include /etc/firejail/disable-common.inc
14include /etc/firejail/disable-programs.inc
15include /etc/firejail/disable-devel.inc 13include /etc/firejail/disable-devel.inc
16include /etc/firejail/disable-passwdmgr.inc 14include /etc/firejail/disable-passwdmgr.inc
15include /etc/firejail/disable-programs.inc
17 16
18caps.drop all 17caps.drop all
18netfilter
19no3d 19no3d
20nogroups 20nogroups
21nonewprivs 21nonewprivs
@@ -24,15 +24,14 @@ nosound
24novideo 24novideo
25protocol unix,inet,inet6 25protocol unix,inet,inet6
26seccomp 26seccomp
27netfilter
28shell none 27shell none
29tracelog 28tracelog
30 29
30disable-mnt
31# private-bin gjs gnome-weather 31# private-bin gjs gnome-weather
32private-tmp
33private-dev 32private-dev
34# private-etc fonts 33# private-etc fonts
35disable-mnt 34private-tmp
36 35
37noexec ${HOME} 36noexec ${HOME}
38noexec /tmp 37noexec /tmp