From 93bf422bd8143e4f0c0ac1e6cc0d5fd531e2dd1c Mon Sep 17 00:00:00 2001 From: Nicola Davide Mannarelli <1094368+nidamanx@users.noreply.github.com> Date: Mon, 22 Feb 2021 11:29:02 +0100 Subject: Add nextcloud --- etc/profile-m-z/nextcloud.profile | 71 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 71 insertions(+) create mode 100644 etc/profile-m-z/nextcloud.profile (limited to 'etc/profile-m-z/nextcloud.profile') diff --git a/etc/profile-m-z/nextcloud.profile b/etc/profile-m-z/nextcloud.profile new file mode 100644 index 000000000..bc1f214eb --- /dev/null +++ b/etc/profile-m-z/nextcloud.profile @@ -0,0 +1,71 @@ +# Firejail profile for nextcloud +# Description: Nextcloud desktop synchronization client +# This file is overwritten after every install/update +# Persistent local customizations +include nextcloud.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/Nextcloud +noblacklist ${HOME}/.config/Nextcloud +noblacklist ${HOME}/.local/share/Nextcloud +# Uncomment or put in your nextcloud.local to allow sync with more directories. +#noblacklist ${DOCUMENTS} +#noblacklist ${MUSIC} +#noblacklist ${PICTURES} +#noblacklist ${VIDEOS} + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/Nextcloud +mkdir ${HOME}/.config/Nextcloud +mkdir ${HOME}/.local/share/Nextcloud +whitelist ${HOME}/Nextcloud +whitelist ${HOME}/.config/Nextcloud +whitelist ${HOME}/.local/share/Nextcloud +# Uncomment or put in your nextcloud.local to allow sync with more directories. +#whitelist ${DOCUMENTS} +#whitelist ${MUSIC} +#whitelist ${PICTURES} +#whitelist ${VIDEOS} +include whitelist-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +machine-id +netfilter +no3d +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix,inet,inet6 +seccomp +seccomp.block-secondary +shell none +tracelog + +disable-mnt +private-bin nextcloud +private-cache +private-etc alternatives,ca-certificates,crypto-policies,drirc,fonts,gcrypt,host.conf,hosts,ld.so.cache,machine-id,Nextcloud,nsswitch.conf,os-release,passwd,pki,pulse,resolv.conf,selinux,ssl,xdg +private-dev +private-tmp + +dbus-user filter +dbus-user.talk org.freedesktop.secrets +dbus-system none -- cgit v1.2.3-70-g09d2