aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/io.github.lainsce.Notejot.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-a-l/io.github.lainsce.Notejot.profile')
-rw-r--r--etc/profile-a-l/io.github.lainsce.Notejot.profile60
1 files changed, 60 insertions, 0 deletions
diff --git a/etc/profile-a-l/io.github.lainsce.Notejot.profile b/etc/profile-a-l/io.github.lainsce.Notejot.profile
new file mode 100644
index 000000000..6753cb332
--- /dev/null
+++ b/etc/profile-a-l/io.github.lainsce.Notejot.profile
@@ -0,0 +1,60 @@
1# Firejail profile for notejot
2# Description: Jot your ideas
3# This file is overwritten after every install/update
4# Persistent local customizations
5include io.github.lainsce.Notejot.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.cache/io.github.lainsce.Notejot
10noblacklist ${HOME}/.local/share/io.github.lainsce.Notejot
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-programs.inc
17include disable-shell.inc
18include disable-xdg.inc
19
20mkdir ${HOME}/.cache/io.github.lainsce.Notejot
21mkdir ${HOME}/.local/share/io.github.lainsce.Notejot
22whitelist ${HOME}/.cache/io.github.lainsce.Notejot
23whitelist ${HOME}/.local/share/io.github.lainsce.Notejot
24whitelist /usr/libexec/webkit2gtk-4.0
25include whitelist-common.inc
26include whitelist-runuser-common.inc
27include whitelist-usr-share-common.inc
28include whitelist-var-common.inc
29
30apparmor
31caps.drop all
32machine-id
33net none
34no3d
35nodvd
36nogroups
37noinput
38nonewprivs
39noroot
40nosound
41notv
42nou2f
43novideo
44protocol unix
45seccomp
46seccomp.block-secondary
47shell none
48tracelog
49
50disable-mnt
51private-bin io.github.lainsce.Notejot
52private-cache
53private-dev
54private-etc alternatives,dconf,fonts,gtk-3.0,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,pango,X11
55private-tmp
56
57dbus-user filter
58dbus-user.own io.github.lainsce.Notejot
59dbus-user.talk ca.desrt.dconf
60dbus-system none