From 9e3ba319be6b9546d7e8f450ca419ee2f3f4040b Mon Sep 17 00:00:00 2001 From: Tad Date: Mon, 7 Aug 2017 01:22:08 -0400 Subject: Unify all profiles --- etc/gimp.profile | 26 ++++++++++++++------------ 1 file changed, 14 insertions(+), 12 deletions(-) (limited to 'etc/gimp.profile') diff --git a/etc/gimp.profile b/etc/gimp.profile index 0fe462912..e63d10d35 100644 --- a/etc/gimp.profile +++ b/etc/gimp.profile @@ -1,15 +1,15 @@ -# Persistent global definitions go here -include /etc/firejail/globals.local - -# This file is overwritten during software install. -# Persistent customizations should go in a .local file. +# Firejail profile for gimp +# This file is overwritten after every install/update +# Persistent local customizations include /etc/firejail/gimp.local +# Persistent global definitions +include /etc/firejail/globals.local -# gimp noblacklist ${HOME}/.gimp* + include /etc/firejail/disable-common.inc -include /etc/firejail/disable-programs.inc include /etc/firejail/disable-passwdmgr.inc +include /etc/firejail/disable-programs.inc caps.drop all net none @@ -21,11 +21,13 @@ protocol unix seccomp shell none -# gimp plugins are installed by the user in ~/.gimp-2.8/plug-ins/ directory -# if you are not using external plugins, you can enable noexec statement below -# noexec ${HOME} +private-dev +private-tmp noexec /tmp -private-dev -private-tmp +# CLOBBERED COMMENTS +# gimp +# gimp plugins are installed by the user in ~/.gimp-2.8/plug-ins/ directory +# if you are not using external plugins, you can enable noexec statement below +# noexec ${HOME} -- cgit v1.2.3-70-g09d2