From 40a51e179d90f54a20c539567adeed1ea0b94d78 Mon Sep 17 00:00:00 2001 From: smitsohu Date: Tue, 8 Aug 2017 21:31:50 +0200 Subject: various little profile fixes and enhancements (#1442) * add novideo * add novideo * add novideo * put noexec last * blacklist Clementine configuration and database * blacklist Clementine configuration and database * add novideo * add novideo, permit access to ~/.java * add novideo * spoof machine-id * mimeapps.list is already in whitelist-common.inc * ~/.local/share/applications is already read-only see disable-common.inc * mimeapps.list is already in whitelist-common.inc * ~/.local/share/applications is already read-only see disable-common.inc * drop machine-id option private-etc hides it anyway --- etc/scribus.profile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'etc/scribus.profile') diff --git a/etc/scribus.profile b/etc/scribus.profile index 7e117dcd1..2ccb5126b 100644 --- a/etc/scribus.profile +++ b/etc/scribus.profile @@ -5,7 +5,7 @@ include /etc/firejail/scribus.local # Persistent global definitions include /etc/firejail/globals.local -# Support for PDF readers (Scribus 1.5 and higher) +# Support for PDF readers comes with Scribus 1.5 and higher noblacklist ~/.config/okularpartrc noblacklist ~/.config/okularrc noblacklist ~/.config/scribus @@ -30,6 +30,7 @@ caps.drop all nonewprivs noroot nosound +novideo protocol unix seccomp tracelog -- cgit v1.2.3-54-g00ecf