From c435504a3eb66dee9a2964658bce8e17627e9c68 Mon Sep 17 00:00:00 2001 From: juan Date: Sat, 16 Sep 2017 13:20:36 -0400 Subject: Add 5 profiles --- etc/krita.profile | 37 +++++++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 etc/krita.profile (limited to 'etc/krita.profile') diff --git a/etc/krita.profile b/etc/krita.profile new file mode 100644 index 000000000..f6e62e387 --- /dev/null +++ b/etc/krita.profile @@ -0,0 +1,37 @@ +# Firejail profile for krita +# This file is overwritten after every install/update +# Persistent local customizations +include /etc/firejail/krita.local +# Persistent global definitions +include /etc/firejail/globals.local + +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /opt + +whitelist ${DOWNLOADS} +whitelist ${HOME}/.config/Trolltech.conf +whitelist ${HOME}/.gtkrc-2.0 +whitelist ${HOME}/.kde4 +whitelist ${HOME}/.themes +whitelist ${HOME}/Images +whitelist /tmp/.X11-unix +# DBus has been forced to use an ordinary unix socket +whitelist /tmp/dbus_session_socket +include /etc/firejail/whitelist-common.inc + +caps.drop all +ipc-namespace +net none +nogroups +noroot +seccomp +shell none + +# private-bin krita,dbus-launch +private-dev +# private-etc fonts,passwd,alternatives,X11 + +noexec /home +noexec /tmp -- cgit v1.2.3-70-g09d2