From 529b38ffd29fd115f4e0eee131904e3b1ea50f17 Mon Sep 17 00:00:00 2001 From: alkim0 Date: Sun, 4 Sep 2022 16:47:21 -0700 Subject: Add profile for chafa (#5355) Co-authored-by: Albert Kim --- etc/profile-a-l/chafa.profile | 55 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 55 insertions(+) create mode 100644 etc/profile-a-l/chafa.profile (limited to 'etc/profile-a-l') diff --git a/etc/profile-a-l/chafa.profile b/etc/profile-a-l/chafa.profile new file mode 100644 index 000000000..b042ac189 --- /dev/null +++ b/etc/profile-a-l/chafa.profile @@ -0,0 +1,55 @@ +# Firejail profile for chafa +# Description: A terminal-based image viewer and image-to-text converter. +# This file is overwritten after every install/update +# Persistent local customizations +include chafa.local +# Persistent global definitions +include globals.local + +blacklist ${RUNUSER} +blacklist /usr/libexec + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-proc.inc +include disable-programs.inc +include disable-shell.inc +include disable-write-mnt.inc + +include whitelist-run-common.inc +include whitelist-runuser-common.inc +# Add the following to your chafa.local if you do not need to view images in +# /usr/share. +#include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +machine-id +net none +no3d +nodvd +nogroups +noinput +nonewprivs +noroot +nosound +notv +nou2f +novideo +seccomp socket +seccomp.block-secondary +tracelog +x11 none + +private-bin chafa +private-cache +private-dev +private-tmp + +dbus-user none +dbus-system none + +read-only ${HOME} -- cgit v1.2.3-70-g09d2