Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a profile for Flatseal #4724

Merged
merged 1 commit into from
Dec 6, 2021
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Add a profile for Flatseal
  • Loading branch information
Hugo Osvaldo Barrera committed Dec 3, 2021
commit 41548ac02d6783896951b7d7ec1eabaabc31e444
65 changes: 65 additions & 0 deletions etc/profile-a-l/com.github.tchx84.Flatseal.profile
Original file line number Diff line number Diff line change
@@ -0,0 +1,65 @@
# Firejail profile for flatseal
WhyNotHugo marked this conversation as resolved.
Show resolved Hide resolved
# This file is overwritten after every install/update
# Persistent local customizations
include com.github.tchx84.Flatseal.local
# Persistent global definitions
include globals.local

noblacklist ${HOME}/.local/share/flatpak/overrides
noblacklist /var/lib/flatpak/app

WhyNotHugo marked this conversation as resolved.
Show resolved Hide resolved
# Allow gjs (blacklisted by disable-interpreters.inc)
include allow-gjs.inc

include disable-common.inc
include disable-devel.inc
WhyNotHugo marked this conversation as resolved.
Show resolved Hide resolved
include disable-exec.inc
include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
include disable-shell.inc
include disable-xdg.inc

WhyNotHugo marked this conversation as resolved.
Show resolved Hide resolved
mkdir ${HOME}/.local/share/flatpak/overrides
whitelist ${HOME}/.local/share/flatpak/overrides
include whitelist-common.inc
include whitelist-run-common.inc
include whitelist-runuser-common.inc
include whitelist-usr-share-common.inc
include whitelist-var-common.inc

apparmor
caps.drop all
net none
no3d
nodvd
nogroups
noinput
nonewprivs
noprinters
noroot
nosound
notv
nou2f
novideo
WhyNotHugo marked this conversation as resolved.
Show resolved Hide resolved
protocol unix
seccomp
seccomp.block-secondary
shell none
WhyNotHugo marked this conversation as resolved.
Show resolved Hide resolved
tracelog

disable-mnt
private-bin com.github.tchx84.Flatseal,gjs
private-cache
private-dev
private-etc alternatives,dconf,fonts,gtk-3.0,ld.so.cache,ld.so.preload
private-tmp

dbus-user filter
dbus-user.own com.github.tchx84.Flatseal
dbus-user.talk ca.desrt.dconf
dbus-user.talk org.freedesktop.impl.portal.PermissionStore
dbus-user.talk org.gnome.Software
dbus-system none

read-write ${HOME}/.local/share/flatpak/overrides
WhyNotHugo marked this conversation as resolved.
Show resolved Hide resolved
1 change: 1 addition & 0 deletions src/firecfg/firecfg.config
Original file line number Diff line number Diff line change
Expand Up @@ -157,6 +157,7 @@ com.github.bleakgrey.tootle
com.github.dahenson.agenda
com.github.johnfactotum.Foliate
com.github.phase1geo.minder
com.github.tchx84.Flatseal
com.gitlab.newsflash
conkeror
conky
Expand Down