From 46dc993c56f58840e385c19ed685936e5e706253 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Mon, 3 Jul 2023 21:40:57 +0000 Subject: Create rssguard.profile --- etc/profile-m-z/rssguard.profile | 57 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 57 insertions(+) create mode 100644 etc/profile-m-z/rssguard.profile (limited to 'etc/profile-m-z/rssguard.profile') diff --git a/etc/profile-m-z/rssguard.profile b/etc/profile-m-z/rssguard.profile new file mode 100644 index 000000000..bad641eb8 --- /dev/null +++ b/etc/profile-m-z/rssguard.profile @@ -0,0 +1,57 @@ +# Firejail profile for rssguard +# Description: Simple (yet powerful) Qt feed reader +# This file is overwritten after every install/update +# Persistent local customizations +include rssguard.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.config/RSS Guard 4 + +include allow-nodejs.inc + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-proc.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.config/RSS Guard 4 +whitelist ${HOME}/.config/RSS Guard 4 +whitelist ${DOWNLOADS} +include whitelist-common.inc +include whitelist-run-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +netfilter +# no3d +nodvd +nogroups +noinput +nonewprivs +noroot +# nosound +notv +nou2f +novideo +protocol unix,inet,inet6 +seccomp +tracelog + +disable-mnt +private-bin node,rssguard +private-dev +private-etc @network,@sound,@tls-ca,@x11,mime.types +private-tmp + +dbus-user none +dbus-system none + +restrict-namespaces -- cgit v1.2.3-54-g00ecf