diff options
Diffstat (limited to 'etc/profile-a-l/journal-viewer.profile')
-rw-r--r-- | etc/profile-a-l/journal-viewer.profile | 50 |
1 files changed, 3 insertions, 47 deletions
diff --git a/etc/profile-a-l/journal-viewer.profile b/etc/profile-a-l/journal-viewer.profile index f73595fb1..eb007b765 100644 --- a/etc/profile-a-l/journal-viewer.profile +++ b/etc/profile-a-l/journal-viewer.profile | |||
@@ -9,60 +9,16 @@ include globals.local | |||
9 | noblacklist ${HOME}/.cache/journal-viewer | 9 | noblacklist ${HOME}/.cache/journal-viewer |
10 | noblacklist ${HOME}/.local/share/com.vmingueza.journal-viewer | 10 | noblacklist ${HOME}/.local/share/com.vmingueza.journal-viewer |
11 | 11 | ||
12 | include disable-common.inc | ||
13 | include disable-devel.inc | ||
14 | include disable-exec.inc | ||
15 | include disable-interpreters.inc | ||
16 | include disable-proc.inc | ||
17 | include disable-programs.inc | ||
18 | include disable-shell.inc | ||
19 | include disable-xdg.inc | ||
20 | |||
21 | mkdir ${HOME}/.cache/journal-viewer | 12 | mkdir ${HOME}/.cache/journal-viewer |
22 | mkdir ${HOME}/.local/share/com.vmingueza.journal-viewer | 13 | mkdir ${HOME}/.local/share/com.vmingueza.journal-viewer |
23 | whitelist ${HOME}/.cache/journal-viewer | 14 | whitelist ${HOME}/.cache/journal-viewer |
24 | whitelist ${HOME}/.local/share/com.vmingueza.journal-viewer | 15 | whitelist ${HOME}/.local/share/com.vmingueza.journal-viewer |
25 | whitelist /run/log/journal | ||
26 | whitelist /var/log/journal | ||
27 | include whitelist-common.inc | ||
28 | include whitelist-run-common.inc | ||
29 | include whitelist-runuser-common.inc | ||
30 | include whitelist-usr-share-common.inc | ||
31 | include whitelist-var-common.inc | ||
32 | |||
33 | apparmor | ||
34 | caps.drop all | ||
35 | ipc-namespace | ||
36 | net none | ||
37 | no3d | ||
38 | nodvd | ||
39 | nogroups | ||
40 | noinput | ||
41 | nonewprivs | ||
42 | noprinters | ||
43 | noroot | ||
44 | nosound | ||
45 | notv | ||
46 | nou2f | ||
47 | novideo | ||
48 | protocol unix | ||
49 | seccomp | ||
50 | seccomp.block-secondary | ||
51 | tracelog | ||
52 | 16 | ||
53 | disable-mnt | ||
54 | private-bin journal-viewer | 17 | private-bin journal-viewer |
55 | private-cache | ||
56 | private-dev | ||
57 | private-etc machine-id | ||
58 | private-lib webkit2gtk-* | 18 | private-lib webkit2gtk-* |
59 | private-tmp | ||
60 | 19 | ||
61 | dbus-user none | ||
62 | dbus-system none | ||
63 | |||
64 | restrict-namespaces | ||
65 | read-only ${HOME} | ||
66 | read-write ${HOME}/.cache/journal-viewer | 20 | read-write ${HOME}/.cache/journal-viewer |
67 | read-write ${HOME}/.local/share/com.vmingueza.journal-viewer | 21 | read-write ${HOME}/.local/share/com.vmingueza.journal-viewer |
68 | writable-var-log | 22 | |
23 | # Redirect | ||
24 | include system-log-common.profile | ||