From 6108f459e375151e95bedf7090eb9b84169479e8 Mon Sep 17 00:00:00 2001
From: ಚಿರಾಗ್ ನಟರಾಜ್ <chiraag.nataraj@gmail.com>
Date: Wed, 11 Jul 2018 19:35:19 -0400
Subject: Blacklist all .snapshots directories in AppArmor profile

---
 etc/firejail-default | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'etc/firejail-default')

diff --git a/etc/firejail-default b/etc/firejail-default
index 8bf42b3a3..28103a598 100644
--- a/etc/firejail-default
+++ b/etc/firejail-default
@@ -83,6 +83,9 @@ deny /proc/@{PID}/oom_score_adj w,
 # Uncomment to silence all denied write warnings
 #deny /sys/** w,
 
+# Blacklist snapshots
+deny /**/.snapshots/ rwx,
+
 ##########
 # Allow running programs only from well-known system directories. If you need
 # to run programs from your home directory, uncomment /home line.
-- 
cgit v1.2.3-54-g00ecf