mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-21 06:45:29 -06:00
New profile: localsend_app.profile (#6244)
Description: An open source cross-platform alternative to AirDrop. https://github.com/localsend/localsend
This commit is contained in:
parent
f48f55f91b
commit
99e9c6abad
3 changed files with 67 additions and 0 deletions
|
|
@ -988,6 +988,7 @@ blacklist ${HOME}/.local/share/liferea
|
|||
blacklist ${HOME}/.local/share/linphone
|
||||
blacklist ${HOME}/.local/share/lobster
|
||||
blacklist ${HOME}/.local/share/local-mail
|
||||
blacklist ${HOME}/.local/share/localsend_app
|
||||
blacklist ${HOME}/.local/share/lollypop
|
||||
blacklist ${HOME}/.local/share/love
|
||||
blacklist ${HOME}/.local/share/lugaru
|
||||
|
|
|
|||
65
etc/profile-a-l/localsend_app.profile
Normal file
65
etc/profile-a-l/localsend_app.profile
Normal file
|
|
@ -0,0 +1,65 @@
|
|||
# Firejail profile for localsend_app
|
||||
# Description: An open source cross-platform alternative to AirDrop
|
||||
# This file is overwritten after every install/update
|
||||
# Persistent local customizations
|
||||
include localsend_app.local
|
||||
# Persistent global definitions
|
||||
include globals.local
|
||||
|
||||
blacklist /usr/libexec
|
||||
|
||||
noblacklist ${HOME}/.local/share/localsend_app
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
include disable-exec.inc
|
||||
include disable-interpreters.inc
|
||||
include disable-proc.inc
|
||||
include disable-programs.inc
|
||||
include disable-shell.inc
|
||||
#include disable-xdg.inc
|
||||
|
||||
#mkdir ${HOME}/.local/share/localsend_app
|
||||
#whitelist ${HOME}/.local/share/localsend_app
|
||||
#whitelist ${DOWNLOADS}
|
||||
#whitelist /usr/share/localsend_app
|
||||
#include whitelist-common.inc
|
||||
include whitelist-run-common.inc
|
||||
include whitelist-runuser-common.inc
|
||||
include whitelist-usr-share-common.inc
|
||||
include whitelist-var-common.inc
|
||||
|
||||
apparmor
|
||||
caps.drop all
|
||||
ipc-namespace
|
||||
machine-id
|
||||
netfilter
|
||||
#no3d
|
||||
nodvd
|
||||
nogroups
|
||||
noinput
|
||||
nonewprivs
|
||||
noprinters
|
||||
noroot
|
||||
nosound
|
||||
notv
|
||||
nou2f
|
||||
novideo
|
||||
protocol unix,inet,inet6
|
||||
seccomp
|
||||
seccomp.block-secondary
|
||||
tracelog
|
||||
|
||||
private-bin localsend_app
|
||||
private-cache
|
||||
private-dev
|
||||
private-etc @network,@tls-ca
|
||||
private-tmp
|
||||
|
||||
dbus-user none
|
||||
dbus-system none
|
||||
|
||||
read-only ${HOME}
|
||||
read-write ${HOME}/.local/share/localsend_app
|
||||
read-write ${DOWNLOADS}
|
||||
restrict-namespaces
|
||||
|
|
@ -512,6 +512,7 @@ lmms
|
|||
lobase
|
||||
lobster
|
||||
localc
|
||||
localsend_app
|
||||
lodraw
|
||||
loffice
|
||||
lofromtemplate
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue