From 644245081c7a45529e49e7b7301580915fb497e3 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Sat, 11 Nov 2023 19:56:48 +0000 Subject: New profile: tiny-rdm (#6083) * disable-programs.inc: add support for tiny-rdm * Create tiny-rdm.profile * firecfg.config: add support for tiny-rdm --- etc/inc/disable-programs.inc | 2 ++ etc/profile-m-z/tiny-rdm.profile | 61 ++++++++++++++++++++++++++++++++++++++++ 2 files changed, 63 insertions(+) create mode 100644 etc/profile-m-z/tiny-rdm.profile (limited to 'etc') diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index 5a61bd448..13b4b2078 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -221,6 +221,7 @@ blacklist ${HOME}/.cache/supertuxkart blacklist ${HOME}/.cache/systemsettings blacklist ${HOME}/.cache/telepathy blacklist ${HOME}/.cache/thunderbird +blacklist ${HOME}/.cache/tiny-rdm blacklist ${HOME}/.cache/torbrowser blacklist ${HOME}/.cache/transmission blacklist ${HOME}/.cache/ueberzugpp @@ -345,6 +346,7 @@ blacklist ${HOME}/.config/Slack blacklist ${HOME}/.config/Standard Notes blacklist ${HOME}/.config/SubDownloader blacklist ${HOME}/.config/Thunar +blacklist ${HOME}/.config/TinyRDM blacklist ${HOME}/.config/Twitch blacklist ${HOME}/.config/Unknown Organization blacklist ${HOME}/.config/VSCodium diff --git a/etc/profile-m-z/tiny-rdm.profile b/etc/profile-m-z/tiny-rdm.profile new file mode 100644 index 000000000..4134d666c --- /dev/null +++ b/etc/profile-m-z/tiny-rdm.profile @@ -0,0 +1,61 @@ +# Firejail profile for tiny-rdm +# Description: A Modern Redis GUI Client +# This file is overwritten after every install/update +# Persistent local customizations +include tiny-rdm.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.cache/tiny-rdm +noblacklist ${HOME}/.config/TinyRDM + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-programs.inc +include disable-proc.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.cache/tiny-rdm +mkdir ${HOME}/.config/TinyRDM +whitelist ${HOME}/.cache/tiny-rdm +whitelist ${HOME}/.config/TinyRDM +include whitelist-common.inc +include whitelist-run-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +ipc-namespace +netfilter +no3d +nodvd +nogroups +noinput +nonewprivs +noprinters +noroot +notv +nou2f +novideo +nosound +protocol unix,inet,inet6 +seccomp +seccomp.block-secondary +tracelog + +disable-mnt +private-bin tiny-rdm +private-cache +private-dev +private-etc @network,@tls-ca,@x11 +private-tmp + +dbus-user none +dbus-system none + +restrict-namespaces -- cgit v1.2.3-54-g00ecf