1 files changed, 52 insertions, 0 deletions

diff --git a/etc/profile-a-l/curl.profile b/etc/profile-a-l/curl.profile
new file mode 100644
index 000000000..996ff51d3
--- /dev/null
+++ b/etc/profile-a-l/curl.profile
@@ -0,0 +1,52 @@
+# Firejail profile for curl
+# Description: Command line tool for transferring data with URL syntax
+# This file is overwritten after every install/update
+quiet
+# Persistent local customizations
+include curl.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.curlrc
+
+blacklist /tmp/.X11-unix
+blacklist ${RUNUSER}/wayland-*
+blacklist ${RUNUSER}
+
+include disable-common.inc
+include disable-exec.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+# depending on workflow you can uncomment the below or put 'include disable-xdg.inc' in your curl.local
+#include disable-xdg.inc
+
+include whitelist-usr-share-common.inc
+include whitelist-var-common.inc
+
+apparmor
+caps.drop all
+ipc-namespace
+machine-id
+netfilter
+no3d
+nodvd
+nogroups
+nonewprivs
+noroot
+nosound
+notv
+nou2f
+novideo
+protocol inet,inet6
+seccomp
+shell none
+tracelog
+
+# private-bin curl
+private-cache
+private-dev
+# private-etc alternatives,ca-certificates,crypto-policies,pki,resolv.conf,ssl
+private-tmp
+
+dbus-user none
+dbus-system none