aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/gnome-keyring.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-a-l/gnome-keyring.profile')
-rw-r--r--etc/profile-a-l/gnome-keyring.profile53
1 files changed, 4 insertions, 49 deletions
diff --git a/etc/profile-a-l/gnome-keyring.profile b/etc/profile-a-l/gnome-keyring.profile
index aa0a7f4cc..287c6dcf9 100644
--- a/etc/profile-a-l/gnome-keyring.profile
+++ b/etc/profile-a-l/gnome-keyring.profile
@@ -1,62 +1,17 @@
1# Firejail profile for gnome-keyring 1# Firejail profile for gnome-keyring
2# Description: Stores passwords and encryption keys 2# Description: Stores passwords and encryption keys
3# This file is overwritten after every install/update 3# This file is overwritten after every install/update
4quiet
5# Persistent local customizations 4# Persistent local customizations
6include gnome-keyring.local 5include gnome-keyring.local
7# Persistent global definitions 6# Persistent global definitions
8include globals.local 7# added by included profile
8#include globals.local
9 9
10noblacklist ${HOME}/.gnupg 10noblacklist ${HOME}/.gnupg
11 11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-programs.inc
17include disable-xdg.inc
18
19mkdir ${HOME}/.gnupg 12mkdir ${HOME}/.gnupg
20whitelist ${HOME}/.gnupg 13whitelist ${HOME}/.gnupg
21whitelist ${DOWNLOADS} 14whitelist ${DOWNLOADS}
22whitelist ${RUNUSER}/gnupg
23whitelist ${RUNUSER}/keyring
24whitelist /usr/share/gnupg
25whitelist /usr/share/gnupg2
26include whitelist-common.inc
27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc
30
31apparmor
32caps.drop all
33ipc-namespace
34machine-id
35netfilter
36no3d
37nodvd
38nogroups
39noinput
40nonewprivs
41noroot
42nosound
43notv
44nou2f
45novideo
46protocol unix,inet,inet6
47seccomp
48seccomp.block-secondary
49tracelog
50
51disable-mnt
52#private-bin gnome-keyrin*,secret-tool
53private-cache
54private-dev
55#private-lib alternatives,gnome-keyring,libsecret-1.so.*,pkcs11,security
56private-tmp
57
58#dbus-user none
59dbus-system none
60 15
61memory-deny-write-execute 16# Redirect
62restrict-namespaces 17include gnome-keyring-daemon.profile