From 895c4600263eecaba6428dd6d29db7db0ae3f419 Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Thu, 6 Jun 2019 16:18:06 +0200 Subject: Add profile for gnome-sound-recorder --- etc/gnome-sound-recorder.profile | 41 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 41 insertions(+) create mode 100644 etc/gnome-sound-recorder.profile (limited to 'etc/gnome-sound-recorder.profile') diff --git a/etc/gnome-sound-recorder.profile b/etc/gnome-sound-recorder.profile new file mode 100644 index 000000000..135106c1e --- /dev/null +++ b/etc/gnome-sound-recorder.profile @@ -0,0 +1,41 @@ +# Firejail profile for gnome-sound-recorder +# Description: simple sound recordings for GNOME +# This file is overwritten after every install/update +# Persistent local customizations +include gnome-sound-recorder.local +# Persistent global definitions +include globals.local + +noblacklist ${MUSIC} +noblacklist ${HOME}/.local/share/flatpak +noblacklist ${HOME}/.local/share/Trash + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +include whitelist-var-common.inc + +caps.drop all +net none +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +novideo +protocol unix +seccomp +shell none +tracelog + +disable-mnt +private-cache +private-dev +private-etc alsa,asound.conf,dconf,fonts,gtk-2.0,gtk-3.0,machine-id,openal,pango,pulse,xdg +private-tmp -- cgit v1.2.3-70-g09d2