From abf6ebd6e2897eb6dd431f34052bc98dea23cbd8 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Wed, 13 Jan 2021 09:20:55 +0000 Subject: new profile: qnapi (#3890) * add new profile: qnapi * add new profile: qnapi * Create qnapi.profile * add qnapi configs * Update README.md * Update README.md --- etc/profile-m-z/qnapi.profile | 55 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 55 insertions(+) create mode 100644 etc/profile-m-z/qnapi.profile (limited to 'etc/profile-m-z/qnapi.profile') diff --git a/etc/profile-m-z/qnapi.profile b/etc/profile-m-z/qnapi.profile new file mode 100644 index 000000000..0d1f9c3de --- /dev/null +++ b/etc/profile-m-z/qnapi.profile @@ -0,0 +1,55 @@ +# Firejail profile for qnapi +# Description: Qt client for downloading movie subtitles from NapiProjekt, OpenSubtitles and Napisy24 +# This file is overwritten after every install/update +# Persistent local customizations +include qnapi.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.config/qnapi.ini + +ignore noexec /tmp + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +mkfile ${HOME}/.config/qnapi.ini +whitelist ${HOME}/.config/qnapi.ini +whitelist ${DOWNLOADS} +include whitelist-common.inc +include whitelist-usr-share-common.inc +include whitelist-runuser-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +ipc-namespace +netfilter +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix,inet,inet6,netlink +seccomp +shell none +tracelog + +private-bin 7z,qnapi +private-cache +private-dev +private-etc alternatives,fonts +private-opt none +private-tmp + +dbus-user none +dbus-system none -- cgit v1.2.3-70-g09d2