diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index c9e566948..a665fa4b4 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -614,6 +614,7 @@ blacklist ${HOME}/.config/qBittorrentrc blacklist ${HOME}/.config/qnapi.ini blacklist ${HOME}/.config/qpdfview blacklist ${HOME}/.config/qt5ct +blacklist ${HOME}/.config/qt6ct blacklist ${HOME}/.config/quodlibet blacklist ${HOME}/.config/qupzilla blacklist ${HOME}/.config/qutebrowser @@ -1029,6 +1030,7 @@ blacklist ${HOME}/.local/share/psi+ blacklist ${HOME}/.local/share/qBittorrent blacklist ${HOME}/.local/share/qpdfview blacklist ${HOME}/.local/share/qt5ct +blacklist ${HOME}/.local/share/qt6ct blacklist ${HOME}/.local/share/quadrapassel blacklist ${HOME}/.local/share/qutebrowser blacklist ${HOME}/.local/share/remmina diff --git a/etc/profile-m-z/qt6ct.profile b/etc/profile-m-z/qt6ct.profile new file mode 100644 index 000000000..4a978c997 --- /dev/null +++ b/etc/profile-m-z/qt6ct.profile @@ -0,0 +1,68 @@ +# Firejail profile for qt6ct +# Description: Qt6 Configuration Utility +# This file is overwritten after every install/update +# Persistent local customizations +include qt6ct.local +# Persistent global definitions +include globals.local + +blacklist /usr/libexec + +noblacklist ${HOME}/.config/qt6ct +noblacklist ${HOME}/.local/share/qt6ct + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-proc.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.config/qt6ct +mkdir ${HOME}/.local/share/qt6ct +whitelist ${HOME}/.config/qt6ct +whitelist ${HOME}/.local/share/qt6ct + +include whitelist-common.inc +include whitelist-run-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +machine-id +net none +no3d +nodvd +nogroups +noinput +nonewprivs +noprinters +noroot +nosound +notv +nou2f +novideo +protocol unix +seccomp +seccomp.block-secondary +tracelog + +disable-mnt +private-bin qt6ct +private-cache +private-dev +private-etc dbus-1,machine-id +private-tmp + +dbus-user none +dbus-system none + +memory-deny-write-execute +read-only ${HOME} +read-write ${HOME}/.config/qt6ct +read-write ${HOME}/.local/share/qt6ct +restrict-namespaces diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index f1c9507d7..e3a2f5200 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -728,6 +728,7 @@ qpdfview qq qt-faststart qt5ct +qt6ct qtox quadrapassel quassel