diff --git a/etc/profile-a-l/com.github.tchx84.Flatseal.profile b/etc/profile-a-l/com.github.tchx84.Flatseal.profile new file mode 100644 index 00000000000..861c4c513c2 --- /dev/null +++ b/etc/profile-a-l/com.github.tchx84.Flatseal.profile @@ -0,0 +1,65 @@ +# Firejail profile for flatseal +# This file is overwritten after every install/update +# Persistent local customizations +include com.github.tchx84.Flatseal.local +# Persistent global definitions +include globals.local + +# Reading dconf is required for GTK theme to work. +noblacklist ${HOME}/.config/dconf/ +noblacklist ${HOME}/.local/share/flatpak/overrides +noblacklist /var/lib/flatpak/app + +include allow-gjs.inc + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-proc.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.local/share/flatpak/overrides +whitelist ${HOME}/.config/dconf/ +whitelist ${HOME}/.local/share/flatpak/overrides +include whitelist-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +net none +no3d +nodvd +nogroups +noinput +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix +seccomp +seccomp.block-secondary +shell none +tracelog + +disable-mnt +private-bin com.github.tchx84.Flatseal,gjs +private-cache +private-dev +private-etc alternatives,dconf,fonts,gtk-3.0,ld.so.cache,ld.so.preload +private-tmp + +dbus-user filter +dbus-user.own com.github.tchx84.Flatseal +dbus-user.talk ca.desrt.dconf +dbus-user.talk org.freedesktop.impl.portal.PermissionStore +dbus-user.talk org.gnome.Software +dbus-system none + +read-write ${HOME}/.local/share/flatpak/overrides diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 117c6f6aea5..2fac76c8f6a 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -157,6 +157,7 @@ com.github.bleakgrey.tootle com.github.dahenson.agenda com.github.johnfactotum.Foliate com.github.phase1geo.minder +com.github.tchx84.Flatseal com.gitlab.newsflash conkeror conky