From df1c73a00f68b3ee2503b75d3220e65f99a7f760 Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Mon, 10 Feb 2020 09:18:57 +0100 Subject: Add a lot of profiles --- etc/softmaker-common.inc | 44 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 44 insertions(+) create mode 100644 etc/softmaker-common.inc (limited to 'etc/softmaker-common.inc') diff --git a/etc/softmaker-common.inc b/etc/softmaker-common.inc new file mode 100644 index 000000000..6eaadee12 --- /dev/null +++ b/etc/softmaker-common.inc @@ -0,0 +1,44 @@ +# Firejail profile for softmaker-common +# This file is overwritten after every install/update +# Persistent local customizations +include softmaker-common.local +# Persistent global definitions +# added by caller profile +#include globals.local + +noblacklist ${HOME}/SoftMaker + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc + +whitelist /usr/share/office2018 +whitelist /usr/share/freeoffice2018 +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +ipc-namespace +netfilter +nodbus +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +novideo +protocol unix,inet,inet6 +seccomp +shell none +tracelog + +private-bin freeoffice-planmaker,freeoffice-presentations,freeoffice-textmaker,planmaker18,planmaker18free,presentations18,presentations18free,sh,textmaker18,textmaker18free +private-cache +private-dev +private-etc ca-certificates,crypto-policies,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id,nsswitch.conf,pki,SoftMaker,ssl +private-tmp -- cgit v1.2.3-70-g09d2