From b01b0b39973154a7f7c05b6d7bf5b2e10ed6f577 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Tue, 2 May 2017 07:56:29 -0400 Subject: adding knotes profile --- etc/disable-programs.inc | 1 + etc/dolphin.profile | 1 + etc/knotes.profile | 27 +++++++++++++++++++++++++++ 3 files changed, 29 insertions(+) create mode 100644 etc/knotes.profile (limited to 'etc') diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 89abbafd8..ddbc3f1fb 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -95,6 +95,7 @@ blacklist ${HOME}/.config/kateschemarc blacklist ${HOME}/.config/katesyntaxhighlightingrc blacklist ${HOME}/.config/katevirc blacklist ${HOME}/.config/kdeconnect +blacklist ${HOME}/.config/knotesrc blacklist ${HOME}/.config/libreoffice blacklist ${HOME}/.config/mate/eom blacklist ${HOME}/.config/mate/mate-dictionary diff --git a/etc/dolphin.profile b/etc/dolphin.profile index 3c9056f62..1a718c87f 100644 --- a/etc/dolphin.profile +++ b/etc/dolphin.profile @@ -10,6 +10,7 @@ noblacklist ~/.config/dolphinrc noblacklist ~/.local/share/dolphin noblacklist ~/.kde4/share/kde4/services noblacklist ~/.kde/share/kde4/services +noblacklist ${HOME}/.local/share/Trash include /etc/firejail/disable-common.inc # dolphin needs to be able to start arbitrary applications so we cannot blacklist their files diff --git a/etc/knotes.profile b/etc/knotes.profile new file mode 100644 index 000000000..8fa88a261 --- /dev/null +++ b/etc/knotes.profile @@ -0,0 +1,27 @@ +# This file is overwritten during software install. +# Persistent customizations should go in a .local file. +include /etc/firejail/knotes.local + +# kate profile +noblacklist ~/.config/knotesrc + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc +#include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc + +caps.drop all +nogroups +nonewprivs +noroot +nosound +protocol unix +seccomp +netfilter +shell none +tracelog + +# private-bin kate +private-tmp +private-dev +# private-etc fonts -- cgit v1.2.3-54-g00ecf