From c545262e3b576cb264fdb207c285ff03e28fe376 Mon Sep 17 00:00:00 2001 From: curiosity-seeker Date: Sun, 12 May 2019 17:30:21 +0200 Subject: cantata.profile The private-etc entries were added by firejail --build but are not complete. --- etc/cantata.profile | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) create mode 100644 etc/cantata.profile (limited to 'etc/cantata.profile') diff --git a/etc/cantata.profile b/etc/cantata.profile new file mode 100644 index 000000000..080c0ddb0 --- /dev/null +++ b/etc/cantata.profile @@ -0,0 +1,36 @@ +# Firejail profile for Cantata +# Description: Multimedia player - Qt5 client for the music Player daemon (MPD) +# This file is overwritten during software install. +# Persistent local customizations +include cantata.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.cache/cantata +noblacklist ${HOME}/.config/cantata +noblacklist ${HOME}/.local/share/cantata +noblacklist ${MUSIC} + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +apparmor +caps.drop all +ipc-namespace +netfilter +nonewprivs +noroot +nou2f +novideo +protocol unix,inet,inet6,netlink, +seccomp +shell none + +# private-etc samba,gcrypt,drirc,fonts,mpd.conf,kde5rc,passwd,xdg,hosts,ssl, +private-bin cantata,mpd +private-dev -- cgit v1.2.3-70-g09d2