From 13def436e70f0fa1d4d304af04b823cb60dc8331 Mon Sep 17 00:00:00 2001 From: veloute <21003408+veloute@users.noreply.github.com> Date: Thu, 26 Jul 2018 01:27:54 +1000 Subject: created flameshot profile (#2063) * created flameshot profile * made requested changes * private-etc fixed --- etc/flameshot.profile | 42 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 etc/flameshot.profile diff --git a/etc/flameshot.profile b/etc/flameshot.profile new file mode 100644 index 000000000..7c2bc8c11 --- /dev/null +++ b/etc/flameshot.profile @@ -0,0 +1,42 @@ +# Firejail profile for flameshot +# This file is overwritten after every install/update +# Persistent local customizations +include /etc/firejail/flameshot.local +# Persistent global definitions +include /etc/firejail/globals.local + +noblacklist ${PICTURES} + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-interpreters.inc +include /etc/firejail/disable-passwdmgr.inc +include /etc/firejail/disable-programs.inc +include /etc/firejail/disable-xdg.inc + +caps.drop all +ipc-namespace +netfilter +no3d +# nodbus +nodvd +nogroups +nonewprivs +noroot +nosound +notv +novideo +protocol unix,inet,inet6 +seccomp +shell none + +disable-mnt +private-bin flameshot +private-cache +private-etc fonts,ca-certificates,ld.so.conf,resolv.conf,ssl +private-dev +private-tmp + +memory-deny-write-execute +noexec ${HOME} +noexec /tmp -- cgit v1.2.3-54-g00ecf