From b1d604d7ba37f668e6586692dd50b1ec32ebf631 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Thu, 11 Oct 2018 07:26:36 +0000 Subject: Create devilspie.profile --- etc/devilspie.profile | 49 +++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 etc/devilspie.profile diff --git a/etc/devilspie.profile b/etc/devilspie.profile new file mode 100644 index 000000000..dbfb05798 --- /dev/null +++ b/etc/devilspie.profile @@ -0,0 +1,49 @@ +# Firejail profile for devilspie +# Description: Window matching daemon +# This file is overwritten after every install/update +# Persistent local customizations +include /etc/firejail/devilspie.local +# Persistent global definitions +include /etc/firejail/globals.local + +noblacklist ${HOME}/.devilspie + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-interpreters.inc +include /etc/firejail/disable-passwdmgr.inc +include /etc/firejail/disable-programs.inc + +caps.drop all +ipc-namespace +machine-id +net none +no3d +nodbus +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix +seccomp +shell none +tracelog + +disable-mnt +private-bin devilspie +private-cache +private-dev +private-etc none +private-lib gconv +private-tmp + +memory-deny-write-execute +noexec ${HOME} +noexec /tmp + +# devilspie will never write anything +read-only ${HOME} -- cgit v1.2.3-70-g09d2 From 319f3731ecc2f20ae6d77ca00f7e7fec2c992af3 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Thu, 11 Oct 2018 07:28:08 +0000 Subject: Update for devilspie --- etc/disable-programs.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 1213e4f24..1a575e77a 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -252,6 +252,7 @@ blacklist ${HOME}/.config/zoomus.conf blacklist ${HOME}/.conkeror.mozdev.org blacklist ${HOME}/.curlrc blacklist ${HOME}/.dashcore +blacklist ${HOME}/.devilspie blacklist ${HOME}/.dia blacklist ${HOME}/.dillo blacklist ${HOME}/.dooble -- cgit v1.2.3-70-g09d2