From 98ea8448317ce9edf4cc48fbc1e7bf54999ca8ae Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Fri, 22 Mar 2019 14:27:15 +0000 Subject: Add kid3, kid3-cli, kid3-qt (#2614) --- etc/kid3.profile | 45 +++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 45 insertions(+) create mode 100644 etc/kid3.profile (limited to 'etc/kid3.profile') diff --git a/etc/kid3.profile b/etc/kid3.profile new file mode 100644 index 000000000..3171e94fe --- /dev/null +++ b/etc/kid3.profile @@ -0,0 +1,45 @@ +# Firejail profile for kid3 +# Description: Audio Tag Editor +# This file is overwritten after every install/update +# Persistent local customizations +include kid3.local +# Persistent global definitions +include globals.local + +noblacklist ${MUSIC} +noblacklist ${HOME}/.config/kid3rc + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +include whitelist-var-common.inc + +apparmor +caps.drop all +netfilter +nodbus +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +novideo +protocol unix,inet,inet6,netlink +seccomp +shell none +tracelog + +private-cache +private-dev +private-etc alternatives,drirc,fonts,kde5rc,gtk-3.0,dconf,machine-id,ca-certificates,ssl,pki,hostname,hosts,resolv.conf,pulse,,crypto-policies +private-tmp +private-opt none +private-srv none + +memory-deny-write-execute -- cgit v1.2.3-70-g09d2