aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/gnome-keyring.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-a-l/gnome-keyring.profile')
-rw-r--r--etc/profile-a-l/gnome-keyring.profile57
1 files changed, 4 insertions, 53 deletions
diff --git a/etc/profile-a-l/gnome-keyring.profile b/etc/profile-a-l/gnome-keyring.profile
index 7d6475d98..287c6dcf9 100644
--- a/etc/profile-a-l/gnome-keyring.profile
+++ b/etc/profile-a-l/gnome-keyring.profile
@@ -4,63 +4,14 @@
4# Persistent local customizations 4# Persistent local customizations
5include gnome-keyring.local 5include gnome-keyring.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7# added by included profile
8#include globals.local
8 9
9noblacklist ${HOME}/.gnupg 10noblacklist ${HOME}/.gnupg
10 11
11blacklist /tmp/.X11-unix
12blacklist ${RUNUSER}/wayland-*
13
14include disable-common.inc
15include disable-devel.inc
16include disable-exec.inc
17include disable-interpreters.inc
18include disable-programs.inc
19#include disable-X11.inc # x11 none
20include disable-xdg.inc
21
22mkdir ${HOME}/.gnupg 12mkdir ${HOME}/.gnupg
23whitelist ${HOME}/.gnupg 13whitelist ${HOME}/.gnupg
24whitelist ${DOWNLOADS} 14whitelist ${DOWNLOADS}
25whitelist ${RUNUSER}/gnupg
26whitelist ${RUNUSER}/keyring
27whitelist /usr/share/gnupg
28whitelist /usr/share/gnupg2
29include whitelist-common.inc
30include whitelist-runuser-common.inc
31include whitelist-usr-share-common.inc
32include whitelist-var-common.inc
33
34apparmor
35caps.drop all
36ipc-namespace
37machine-id
38netfilter
39no3d
40nodvd
41nogroups
42noinput
43nonewprivs
44noroot
45nosound
46notv
47nou2f
48novideo
49protocol unix,inet,inet6
50seccomp
51seccomp.block-secondary
52tracelog
53x11 none
54
55disable-mnt
56#private-bin gnome-keyrin*,secret-tool
57private-cache
58private-dev
59#private-lib alternatives,gnome-keyring,libsecret-1.so.*,pkcs11,security
60private-tmp
61
62#dbus-user none
63dbus-system none
64 15
65memory-deny-write-execute 16# Redirect
66restrict-namespaces 17include gnome-keyring-daemon.profile