1 files changed, 49 insertions, 0 deletions

diff --git a/etc/profile-a-l/libreoffice.profile b/etc/profile-a-l/libreoffice.profile
new file mode 100644
index 000000000..aa113883e
--- /dev/null
+++ b/etc/profile-a-l/libreoffice.profile
@@ -0,0 +1,49 @@
+# Firejail profile for libreoffice
+# Description: Office productivity suite
+# This file is overwritten after every install/update
+# Persistent local customizations
+include libreoffice.local
+# Persistent global definitions
+include globals.local
+
+noblacklist /usr/local/sbin
+noblacklist ${HOME}/.config/libreoffice
+
+# libreoffice uses java for some certain operations
+# comment if you don't care about java functionality
+# Allow java (blacklisted by disable-devel.inc)
+include allow-java.inc
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+
+include whitelist-var-common.inc
+
+# ubuntu 18.04 comes with its own apparmor profile, but it is not in enforce mode.
+# comment the next line to use the ubuntu profile instead of firejail's apparmor profile
+apparmor
+caps.drop all
+netfilter
+nodvd
+nogroups
+# comment nonewprivs when using the ubuntu 18.04/debian 10 apparmor profile
+nonewprivs
+noroot
+notv
+nou2f
+novideo
+# comment the protocol line when using the ubuntu 18.04/debian 10 apparmor profile
+protocol unix,inet,inet6
+# comment seccomp when using the ubuntu 18.04/debian 10 apparmor profile
+seccomp
+shell none
+# comment tracelog when using the ubuntu 18.04/debian 10 apparmor profile
+tracelog
+
+private-dev
+private-tmp
+
+join-or-start libreoffice