From 3f4d6df0410f2b6e7ea295b7a3d7a0293f478fa9 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Wed, 20 Mar 2024 11:42:44 +0000 Subject: New profile: metadata-cleaner.profile (#6246) Description: Python GTK3 application to view and clean metadata in files, using mat2. https://gitlab.com/rmnvgr/metadata-cleaner --- etc/profile-m-z/metadata-cleaner.profile | 65 ++++++++++++++++++++++++++++++++ 1 file changed, 65 insertions(+) create mode 100644 etc/profile-m-z/metadata-cleaner.profile (limited to 'etc/profile-m-z') diff --git a/etc/profile-m-z/metadata-cleaner.profile b/etc/profile-m-z/metadata-cleaner.profile new file mode 100644 index 000000000..4ea49c46b --- /dev/null +++ b/etc/profile-m-z/metadata-cleaner.profile @@ -0,0 +1,65 @@ +# Firejail profile for metadata-cleaner +# Description: Python GTK application to view and clean metadata in files, using mat2 +# This file is overwritten after every install/update +# Persistent local customizations +include metadata-cleaner.local +# Persistent global definitions +include globals.local + +blacklist /usr/libexec + +# Allow perl (blacklisted by disable-interpreters.inc) +include allow-perl.inc + +# Allow python3 (blacklisted by disable-interpreters.inc) +include allow-python3.inc + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-programs.inc +include disable-shell.inc + +whitelist /usr/share/metadata-remover +whitelist /usr/share/perl-image-exiftool +include whitelist-run-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +ipc-namespace +machine-id +net none +no3d +nodvd +nogroups +noinput +nonewprivs +noprinters +noroot +notv +nou2f +novideo +nosound +protocol unix,netlink +seccomp +seccomp.block-secondary +tracelog + +#disable-mnt +private-bin bash,exiftool,ffmpeg,metadata-cleaner,perl,python,python*,sh,which +private-cache +private-dev +private-etc @x11,mime.types +private-tmp + +dbus-user filter +dbus-user.own fr.romainvigier.MetadataCleaner +dbus-user.talk ca.desrt.dconf +dbus-user.talk org.gtk.vfs.UDisks2VolumeMonitor +dbus-system none + +restrict-namespaces -- cgit v1.2.3-54-g00ecf