From 9e3ba319be6b9546d7e8f450ca419ee2f3f4040b Mon Sep 17 00:00:00 2001 From: Tad Date: Mon, 7 Aug 2017 01:22:08 -0400 Subject: Unify all profiles --- etc/gnome-clocks.profile | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) (limited to 'etc/gnome-clocks.profile') diff --git a/etc/gnome-clocks.profile b/etc/gnome-clocks.profile index 129bd6e71..e20cbd9fe 100644 --- a/etc/gnome-clocks.profile +++ b/etc/gnome-clocks.profile @@ -1,17 +1,18 @@ -# Persistent global definitions go here +# Firejail profile for gnome-clocks +# This file is overwritten after every install/update +# Persistent local customizations +include /etc/firejail/gnome-clocks.local +# Persistent global definitions include /etc/firejail/globals.local -# This file is overwritten during software install. -# Persistent customizations should go in a .local file. -include /etc/firejail/gnome-clocks.local -# gnome-clocks profile include /etc/firejail/disable-common.inc -include /etc/firejail/disable-programs.inc include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc +include /etc/firejail/disable-programs.inc caps.drop all +netfilter no3d nogroups nonewprivs @@ -19,15 +20,14 @@ noroot novideo protocol unix,inet,inet6 seccomp -netfilter shell none tracelog +disable-mnt # private-bin gnome-clocks -private-tmp private-dev # private-etc fonts -disable-mnt +private-tmp noexec ${HOME} noexec /tmp -- cgit v1.2.3-54-g00ecf