diff options
Diffstat (limited to 'etc/profile-a-l/libreoffice.profile')
-rw-r--r-- | etc/profile-a-l/libreoffice.profile | 18 |
1 files changed, 10 insertions, 8 deletions
diff --git a/etc/profile-a-l/libreoffice.profile b/etc/profile-a-l/libreoffice.profile index 0041f2540..e4440eac0 100644 --- a/etc/profile-a-l/libreoffice.profile +++ b/etc/profile-a-l/libreoffice.profile | |||
@@ -9,8 +9,8 @@ include globals.local | |||
9 | noblacklist /usr/local/sbin | 9 | noblacklist /usr/local/sbin |
10 | noblacklist ${HOME}/.config/libreoffice | 10 | noblacklist ${HOME}/.config/libreoffice |
11 | 11 | ||
12 | # libreoffice uses java for some certain operations | 12 | # libreoffice uses java for some functionality. |
13 | # comment if you don't care about java functionality | 13 | # Add 'ignore include allow-java.inc' to your libreoffice.local if you don't need that functionality. |
14 | # Allow java (blacklisted by disable-devel.inc) | 14 | # Allow java (blacklisted by disable-devel.inc) |
15 | include allow-java.inc | 15 | include allow-java.inc |
16 | 16 | ||
@@ -22,26 +22,28 @@ include disable-programs.inc | |||
22 | 22 | ||
23 | include whitelist-var-common.inc | 23 | include whitelist-var-common.inc |
24 | 24 | ||
25 | # ubuntu 18.04 comes with its own apparmor profile, but it is not in enforce mode. | 25 | # Debian 10/Ubuntu 18.04 come with their own apparmor profile, but it is not in enforce mode. |
26 | # comment the next line to use the ubuntu profile instead of firejail's apparmor profile | 26 | # Add the next lines to your libreoffice.local to use the Ubuntu profile instead of firejail's apparmor profile. |
27 | #ignore apparmor | ||
28 | #ignore nonewprivs | ||
29 | #ignore protocol | ||
30 | #ignore seccomp | ||
31 | #ignore tracelog | ||
32 | |||
27 | apparmor | 33 | apparmor |
28 | caps.drop all | 34 | caps.drop all |
29 | netfilter | 35 | netfilter |
30 | nodvd | 36 | nodvd |
31 | nogroups | 37 | nogroups |
32 | noinput | 38 | noinput |
33 | # comment nonewprivs when using the ubuntu 18.04/debian 10 apparmor profile | ||
34 | nonewprivs | 39 | nonewprivs |
35 | noroot | 40 | noroot |
36 | notv | 41 | notv |
37 | nou2f | 42 | nou2f |
38 | novideo | 43 | novideo |
39 | # comment the protocol line when using the ubuntu 18.04/debian 10 apparmor profile | ||
40 | protocol unix,inet,inet6 | 44 | protocol unix,inet,inet6 |
41 | # comment seccomp when using the ubuntu 18.04/debian 10 apparmor profile | ||
42 | seccomp | 45 | seccomp |
43 | shell none | 46 | shell none |
44 | # comment tracelog when using the ubuntu 18.04/debian 10 apparmor profile | ||
45 | tracelog | 47 | tracelog |
46 | 48 | ||
47 | #private-bin libreoffice,sh,uname,dirname,grep,sed,basename,ls | 49 | #private-bin libreoffice,sh,uname,dirname,grep,sed,basename,ls |