tighten mate-calc profile

onny · Sep 24, 2017 · 463ebe8 · 463ebe8
1 parent e0f00fe
commit 463ebe8
Showing 1 changed file with 12 additions and 1 deletion.
diff --git a/etc/mate-calc.profile b/etc/mate-calc.profile
@@ -12,8 +12,15 @@ include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
 
+whitelist ${HOME}/.cache/mate-calc
+whitelist ${HOME}/.config/caja
+whitelist ${HOME}/.config/gtk-3.0
+whitelist ${HOME}/.config/dconf
+whitelist ${HOME}./config/mate-menu
+whitelist ${HOME}/.themes
+
 caps.drop all
-netfilter
+net none
 no3d
 nodvd
 nogroups
@@ -27,8 +34,12 @@ seccomp
 shell none
 
 disable-mnt
+private-bin mate-calc,mate-calculator
+private-etc fonts
 private-dev
+private-opt none
 private-tmp
 
+memory-deny-write-execute
 noexec ${HOME}
 noexec /tmp