From 7c481eb43c3a737eeb5a0e4fc089efa281549e4c Mon Sep 17 00:00:00 2001 From: Fred-Barclay Date: Sat, 20 Oct 2018 22:13:13 -0500 Subject: Add QOwnNotes profile --- etc/QOwnNotes.profile | 56 +++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 56 insertions(+) create mode 100644 etc/QOwnNotes.profile (limited to 'etc/QOwnNotes.profile') diff --git a/etc/QOwnNotes.profile b/etc/QOwnNotes.profile new file mode 100644 index 000000000..1135b850b --- /dev/null +++ b/etc/QOwnNotes.profile @@ -0,0 +1,56 @@ +# Firejail profile for QOwnNotes +# Description: Plain-text file notepad with markdown support and ownCloud integration +# This file is overwritten after every install/update +# Persistent local customizations +include QOwnNotes.local +# Persistent global definitions +include globals.local + +noblacklist ${DOCUMENTS} +noblacklist ${HOME}/Nextcloud/Notes +noblacklist ${HOME}/.config/PBE +noblacklist ${HOME}/.local/share/PBE + +mkdir ${DOCUMENTS} +mkdir ${HOME}/Nextcloud/Notes +mkdir ${HOME}.config/PBE +mkdir ${HOME}/.local/share/PBE +whitelist ${DOCUMENTS} +whitelist ${HOME}/Nextcloud/Notes +whitelist ${HOME}/.config/PBE +whitelist ${HOME}/.local/share/PBE +include whitelist-common.inc +include whitelist-var-common.inc + +include disable-common.inc +include disable-devel.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +caps.drop all +machine-id +netfilter +no3d +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix,inet,inet6,netlink +seccomp +shell none +tracelog + +disable-mnt +private-bin QOwnNotes,gio +private-dev +private-etc fonts,ld.so.cache,pulse,resolv.conf,hosts,nsswitch.conf,host.conf,ca-certificates,ssl,pki,crypto-policies +private-tmp + +noexec ${HOME} +noexec /tmp -- cgit v1.2.3-70-g09d2