From 96e801fd8a8f4a743e2286b9367177ce8f7b3c65 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Mon, 18 Apr 2016 09:38:54 -0400 Subject: added okular and gwenview profiles --- etc/disable-programs.inc | 5 +++++ etc/gwenview.profile | 19 +++++++++++++++++++ etc/okular.profile | 21 +++++++++++++++++++++ 3 files changed, 45 insertions(+) create mode 100644 etc/gwenview.profile create mode 100644 etc/okular.profile (limited to 'etc') diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 43b9cff38..23dd8e025 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -8,6 +8,11 @@ blacklist ${HOME}/.Wolfram Research blacklist ${HOME}/.config/mupen64plus blacklist ${HOME}/.config/transmission blacklist ${HOME}/.config/uGet +blacklist ~/.kde/share/apps/okular +blacklist ~/.kde/share/config/okularrc +blacklist ~/.kde/share/config/okularpartrc +blacklist ~/.kde/share/apps/gwenview +blacklist ~/.kde/share/config/gwenviewrc # Media players blacklist ${HOME}/.config/cmus diff --git a/etc/gwenview.profile b/etc/gwenview.profile new file mode 100644 index 000000000..d61c57adc --- /dev/null +++ b/etc/gwenview.profile @@ -0,0 +1,19 @@ +# KDE gwenview profile +noblacklist ~/.kde/share/apps/gwenview +noblacklist ~/.kde/share/config/gwenviewrc +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc +caps.drop all +seccomp +protocol unix +noroot +nogroups +private-dev + +#Experimental: +#shell none +#private-bin gwenview +#private-etc X11 + diff --git a/etc/okular.profile b/etc/okular.profile new file mode 100644 index 000000000..7929a8796 --- /dev/null +++ b/etc/okular.profile @@ -0,0 +1,21 @@ +# KDE okular profile +noblacklist ~/.kde/share/apps/okular +noblacklist ~/.kde/share/config/okularrc +noblacklist ~/.kde/share/config/okularpartrc +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc +caps.drop all +seccomp +protocol unix +noroot +nogroups +private-dev + +#Experimental: +#net none +#shell none +#private-bin okular,kbuildsycoca4,kbuildsycoca5 +#private-etc X11 + -- cgit v1.2.3-54-g00ecf