aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-a-l')
-rw-r--r--etc/profile-a-l/loupe.profile50
1 files changed, 50 insertions, 0 deletions
diff --git a/etc/profile-a-l/loupe.profile b/etc/profile-a-l/loupe.profile
new file mode 100644
index 000000000..5d39341f5
--- /dev/null
+++ b/etc/profile-a-l/loupe.profile
@@ -0,0 +1,50 @@
1# Firejail profile for loupe
2# Description: GNOME's modern Image Viewer program
3# This file is overwritten after every install/update
4# Persistent local customizations
5include loupe.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.local/share/Trash
10noblacklist ${HOME}/.Steam
11noblacklist ${HOME}/.steam
12
13#include disable-common.inc
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-programs.inc
18include disable-write-mnt.inc
19
20#whitelist /usr/share/glycin-loaders
21include whitelist-runuser-common.inc
22#include whitelist-usr-share-common.inc
23include whitelist-var-common.inc
24
25apparmor
26caps.drop all
27ipc-namespace
28machine-id
29net none
30nodvd
31nogroups
32noinput
33nonewprivs
34noprinters
35noroot
36nosound
37notv
38nou2f
39novideo
40protocol unix,netlink
41#loupe decodes all images in their own sandbox via glycin
42#https://gitlab.gnome.org/sophie-h/glycin#sandboxing-and-inner-workings
43#seccomp
44seccomp.block-secondary
45tracelog
46
47private-cache
48private-dev
49private-etc @x11
50private-tmp