From 9c833ae929f64fa54c5d8aa49e4a784803b805c8 Mon Sep 17 00:00:00 2001 From: Chiraag Nataraj Date: Sat, 16 Sep 2017 13:18:26 -0400 Subject: Add 31 profiles --- etc/freecad.profile | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) create mode 100644 etc/freecad.profile (limited to 'etc/freecad.profile') diff --git a/etc/freecad.profile b/etc/freecad.profile new file mode 100644 index 000000000..0467edb6d --- /dev/null +++ b/etc/freecad.profile @@ -0,0 +1,36 @@ +# Firejail profile for freecad +# This file is overwritten after every install/update +# Persistent local customizations +include /etc/firejail/freecad.local +# Persistent global definitions +include /etc/firejail/globals.local + +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt +blacklist /usr/local/bin +blacklist /usr/local/sbin + +whitelist ${DOWNLOADS} +whitelist ${HOME}/.config/FreeCAD +whitelist ${HOME}/Documents +include /etc/firejail/whitelist-common.inc + +caps.drop all +ipc-namespace +net none +nogroups +noroot +nosound +protocol unix +seccomp +shell none + +private-bin freecad,freecadcmd +private-dev +private-etc fonts,passwd,alternatives,X11 +private-tmp + +noexec ${HOME} +noexec /tmp -- cgit v1.2.3-54-g00ecf