From 9c833ae929f64fa54c5d8aa49e4a784803b805c8 Mon Sep 17 00:00:00 2001 From: Chiraag Nataraj Date: Sat, 16 Sep 2017 13:18:26 -0400 Subject: Add 31 profiles --- etc/natron.profile | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 etc/natron.profile (limited to 'etc/natron.profile') diff --git a/etc/natron.profile b/etc/natron.profile new file mode 100644 index 000000000..6101d1331 --- /dev/null +++ b/etc/natron.profile @@ -0,0 +1,34 @@ +# Firejail profile for natron +# This file is overwritten after every install/update +# Persistent local customizations +include /etc/firejail/natron.local +# Persistent global definitions +include /etc/firejail/globals.local + +# Contributed by triceratops1 (https://github.com/triceratops1) + +blacklist /boot +blacklist /media +blacklist /mnt +blacklist /usr/local/bin +blacklist /usr/local/sbin + +whitelist ${DOWNLOADS} +whitelist ${HOME}/.Natron +whitelist ${HOME}/.cache/INRIA/Natron/ +whitelist ${HOME}/.config/INRIA/ +whitelist ${HOME}/.gtkrc-2.0 +whitelist ${HOME}/.themes +whitelist ${HOME}/Videos +whitelist /opt/natron/ +whitelist /tmp/.X11-unix/ +include /etc/firejail/whitelist-common.inc + +ipc-namespace +shell none + +private-bin natron +private-etc fonts,X11,pulse + +noexec ${HOME} +noexec /tmp -- cgit v1.2.3-70-g09d2