diff --git a/etc/profile-a-l/com.github.tchx84.Flatseal.profile b/etc/profile-a-l/com.github.tchx84.Flatseal.profile new file mode 100644 index 00000000000..fb1e93ed9ce --- /dev/null +++ b/etc/profile-a-l/com.github.tchx84.Flatseal.profile @@ -0,0 +1,55 @@ +# Firejail profile for flatseal +# This file is overwritten after every install/update +# Persistent local customizations +include com.github.tchx84.Flatseal.local +# Persistent global definitions +include globals.local + +# Required for GTK theem to work: +noblacklist ${HOME}/.config/dconf/ +noblacklist ${HOME}/.local/share/flatpak/overrides + +# Required for GTK theem to work: +whitelist ${HOME}/.config/dconf/ + +mkdir ${HOME}/.local/share/flatpak/overrides +whitelist ${HOME}/.local/share/flatpak/overrides +include disable-devel.inc +include disable-exec.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +apparmor +caps.drop all +net none +no3d +nodvd +nogroups +noinput +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix +seccomp +seccomp.block-secondary +shell none +tracelog + +disable-mnt +private-bin com.github.tchx84.Flatseal,gjs +private-cache +private-dev +private-etc dconf,fonts,gtk-3.0 +private-tmp + +dbus-user filter +dbus-user.own com.github.tchx84.Flatseal +dbus-user.talk org.freedesktop.impl.portal.PermissionStore +dbus-user.talk org.gnome.Software +dbus-system none + +read-only ${HOME}/.config/dconf/ diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 117c6f6aea5..2fac76c8f6a 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -157,6 +157,7 @@ com.github.bleakgrey.tootle com.github.dahenson.agenda com.github.johnfactotum.Foliate com.github.phase1geo.minder +com.github.tchx84.Flatseal com.gitlab.newsflash conkeror conky