aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/lifeograph.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-a-l/lifeograph.profile')
-rw-r--r--etc/profile-a-l/lifeograph.profile58
1 files changed, 58 insertions, 0 deletions
diff --git a/etc/profile-a-l/lifeograph.profile b/etc/profile-a-l/lifeograph.profile
new file mode 100644
index 000000000..b9ed0de8e
--- /dev/null
+++ b/etc/profile-a-l/lifeograph.profile
@@ -0,0 +1,58 @@
1# Firejail profile for lifeograph
2# Description: Lifeograph is a diary program to take personal notes
3# This file is overwritten after every install/update
4# Persistent local customizations
5include lifeograph.local
6# Persistent global definitions
7include globals.local
8
9nodeny ${DOCUMENTS}
10
11deny /usr/libexec
12
13include disable-common.inc
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19include disable-shell.inc
20include disable-xdg.inc
21
22allow ${DOCUMENTS}
23allow /usr/share/lifeograph
24include whitelist-common.inc
25include whitelist-runuser-common.inc
26include whitelist-usr-share-common.inc
27include whitelist-var-common.inc
28
29apparmor
30caps.drop all
31machine-id
32net none
33no3d
34nodvd
35nogroups
36noinput
37nonewprivs
38noroot
39nosound
40notv
41nou2f
42novideo
43protocol unix
44seccomp
45seccomp.block-secondary
46shell none
47tracelog
48
49disable-mnt
50private-bin lifeograph
51private-cache
52private-dev
53private-etc alternatives,dconf,fonts,gtk-3.0,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,pango,X11
54private-tmp
55
56dbus-user filter
57dbus-user.talk ca.desrt.dconf
58dbus-system none