From 78a8f830c21d932d05883971d6c41f4d2c4de7e9 Mon Sep 17 00:00:00 2001 From: Tad Date: Sun, 19 Aug 2018 15:50:17 -0400 Subject: Add a profile for ClamTK --- etc/clamtk.profile | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 etc/clamtk.profile (limited to 'etc') diff --git a/etc/clamtk.profile b/etc/clamtk.profile new file mode 100644 index 000000000..d916381b2 --- /dev/null +++ b/etc/clamtk.profile @@ -0,0 +1,28 @@ +# Firejail profile for clamtk +# This file is overwritten after every install/update +# Persistent local customizations +include /etc/firejail/clamtk.local +# Persistent global definitions +include /etc/firejail/globals.local + +caps.drop all +ipc-namespace +net none +no3d +nodbus +nodvd +nogroups +nonewprivs +noroot +nosound +notv +novideo +protocol unix +seccomp +shell none + +private-dev + +memory-deny-write-execute +noexec ${HOME} +noexec /tmp -- cgit v1.2.3-54-g00ecf