aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-m-z')
-rw-r--r--etc/profile-m-z/io.github.lainsce.Notejot.profile61
-rw-r--r--etc/profile-m-z/rednotebook.profile67
-rw-r--r--etc/profile-m-z/zim.profile72
3 files changed, 200 insertions, 0 deletions
diff --git a/etc/profile-m-z/io.github.lainsce.Notejot.profile b/etc/profile-m-z/io.github.lainsce.Notejot.profile
new file mode 100644
index 000000000..a8029db72
--- /dev/null
+++ b/etc/profile-m-z/io.github.lainsce.Notejot.profile
@@ -0,0 +1,61 @@
1# Firejail profile for notejot
2# Description: Jot your ideas
3# This file is overwritten after every install/update
4# Persistent local customizations
5include io.github.lainsce.Notejot.local
6# Persistent global definitions
7include globals.local
8
9nodeny ${HOME}/.cache/io.github.lainsce.Notejot
10nodeny ${HOME}/.local/share/io.github.lainsce.Notejot
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18include disable-shell.inc
19include disable-xdg.inc
20
21mkdir ${HOME}/.cache/io.github.lainsce.Notejot
22mkdir ${HOME}/.local/share/io.github.lainsce.Notejot
23allow ${HOME}/.cache/io.github.lainsce.Notejot
24allow ${HOME}/.local/share/io.github.lainsce.Notejot
25allow /usr/libexec/webkit2gtk-4.0
26include whitelist-common.inc
27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc
30
31apparmor
32caps.drop all
33machine-id
34net none
35no3d
36nodvd
37nogroups
38noinput
39nonewprivs
40noroot
41nosound
42notv
43nou2f
44novideo
45protocol unix
46seccomp
47seccomp.block-secondary
48shell none
49tracelog
50
51disable-mnt
52private-bin io.github.lainsce.Notejot
53private-cache
54private-dev
55private-etc alternatives,dconf,fonts,gtk-3.0,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,pango,X11
56private-tmp
57
58dbus-user filter
59dbus-user.own io.github.lainsce.Notejot
60dbus-user.talk ca.desrt.dconf
61dbus-system none
diff --git a/etc/profile-m-z/rednotebook.profile b/etc/profile-m-z/rednotebook.profile
new file mode 100644
index 000000000..67281c518
--- /dev/null
+++ b/etc/profile-m-z/rednotebook.profile
@@ -0,0 +1,67 @@
1# Firejail profile for rednotebook
2# Description: Daily journal with calendar, templates and keyword searching
3# This file is overwritten after every install/update
4# Persistent local customizations
5include rednotebook.local
6# Persistent global definitions
7include globals.local
8
9nodeny ${HOME}/.cache/rednotebook
10nodeny ${HOME}/.rednotebook
11
12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python3.inc
14
15include disable-common.inc
16include disable-devel.inc
17include disable-exec.inc
18include disable-interpreters.inc
19include disable-passwdmgr.inc
20include disable-programs.inc
21include disable-shell.inc
22
23mkdir ${HOME}/.cache/rednotebook
24mkdir ${HOME}/.rednotebook
25allow ${HOME}/.cache/rednotebook
26allow ${HOME}/.rednotebook
27allow ${DESKTOP}
28allow ${DOCUMENTS}
29allow ${DOWNLOADS}
30allow ${MUSIC}
31allow ${PICTURES}
32allow ${VIDEOS}
33allow /usr/libexec/webkit2gtk-4.0
34include whitelist-common.inc
35include whitelist-runuser-common.inc
36include whitelist-usr-share-common.inc
37include whitelist-var-common.inc
38
39apparmor
40caps.drop all
41machine-id
42net none
43no3d
44nodvd
45nogroups
46noinput
47nonewprivs
48noroot
49nosound
50notv
51nou2f
52novideo
53protocol unix
54seccomp
55seccomp.block-secondary
56shell none
57tracelog
58
59disable-mnt
60private-bin python3*,rednotebook
61private-cache
62private-dev
63private-etc alternatives,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,pango,X11
64private-tmp
65
66dbus-user none
67dbus-system none
diff --git a/etc/profile-m-z/zim.profile b/etc/profile-m-z/zim.profile
new file mode 100644
index 000000000..5ae9cddb3
--- /dev/null
+++ b/etc/profile-m-z/zim.profile
@@ -0,0 +1,72 @@
1# Firejail profile for Zim
2# Description: Desktop wiki & notekeeper
3# This file is overwritten after every install/update
4# Persistent local customizations
5include zim.local
6# Persistent global definitions
7include globals.local
8
9nodeny ${HOME}/.cache/zim
10nodeny ${HOME}/.config/zim
11
12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc
14include allow-python3.inc
15
16deny /usr/libexec
17
18include disable-common.inc
19include disable-devel.inc
20include disable-exec.inc
21include disable-interpreters.inc
22include disable-passwdmgr.inc
23include disable-programs.inc
24include disable-shell.inc
25
26mkdir ${HOME}/.cache/zim
27mkdir ${HOME}/.config/zim
28mkdir ${HOME}/Notebooks
29allow ${HOME}/.cache/zim
30allow ${HOME}/.config/zim
31allow ${HOME}/Notebooks
32allow ${DESKTOP}
33allow ${DOCUMENTS}
34allow ${DOWNLOADS}
35allow ${MUSIC}
36allow ${PICTURES}
37allow ${VIDEOS}
38allow /usr/share/zim
39include whitelist-common.inc
40include whitelist-runuser-common.inc
41include whitelist-usr-share-common.inc
42include whitelist-var-common.inc
43
44apparmor
45caps.drop all
46machine-id
47net none
48no3d
49nodvd
50nogroups
51noinput
52nonewprivs
53noroot
54nosound
55notv
56nou2f
57novideo
58protocol unix
59seccomp
60seccomp.block-secondary
61shell none
62tracelog
63
64disable-mnt
65private-bin python*,zim
66private-cache
67private-dev
68private-etc alternatives,dconf,fonts,gconf,gtk-2.0,gtk-3.0,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,pango,X11
69private-tmp
70
71dbus-user none
72dbus-system none
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-08 16:19:18 +0000