From b11e9449a08409b5cd82a51eff3f7aa7bcd075b4 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Sun, 24 Nov 2019 20:22:40 +0000 Subject: Add new profile: gmpc (#3059) * Create gmpc.profile * Add gmpc config to disable-programs.inc * Add gmpc to firecfg.config --- etc/gmpc.profile | 54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 54 insertions(+) create mode 100644 etc/gmpc.profile (limited to 'etc/gmpc.profile') diff --git a/etc/gmpc.profile b/etc/gmpc.profile new file mode 100644 index 000000000..b13050dbd --- /dev/null +++ b/etc/gmpc.profile @@ -0,0 +1,54 @@ +# Firejail profile for gmpc +# Description: MPD client +# This file is overwritten after every install/update +# Persistent local customizations +include gmpc.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.config/gmpc + +noblacklist ${MUSIC} + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +mkdir ${HOME}/.config/gmpc +whitelist ${HOME}/.config/gmpc + +whitelist /usr/share/gmpc +include whitelist-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +ipc-namespace +netfilter +no3d +#nodbus +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +novideo +protocol unix,inet,inet6 +seccomp +shell none +tracelog + +disable-mnt +#private-bin gmpc +private-cache +private-etc alternatives,fonts +private-tmp + +# memory-deny-write-execute - breaks on Arch +writable-run-user -- cgit v1.2.3-70-g09d2