kdeinit4 profile

This commit is contained in:
smitsohu 2017-11-27 01:23:04 +01:00
parent b1878e8828
commit e672be36a6
4 changed files with 39 additions and 2 deletions

View file

@ -245,7 +245,8 @@ imagej, karbon, kdenlive, krita, linphone, lmms, macrofusion, mpd, natron, Natro
ricochet, shotcut, teamspeak3, tor, tor-browser-en, Viber, x-terminal-emulator, zart,
conky, arch-audit, ffmpeg, bluefish, cliqz, cinelerra, openshot-qt, pinta, uefitool,
aosp, pdfmod, gnome-ring, signal-desktop, xcalc, zaproxy, kopete, kget, nheko, Enpass,
kwin_x11, krunner, ping, bsdtar, makepkg (Arch), archaudit-report, cower (Arch)
kwin_x11, krunner, ping, bsdtar, makepkg (Arch), archaudit-report, cower (Arch),
kdeinit4
Upstreamed many profiles from the following sources: https://github.com/chiraag-nataraj/firejail-profiles,
https://github.com/nyancat18/fe, and https://aur.archlinux.org/packages/firejail-profiles.

View file

@ -43,7 +43,7 @@ firejail (0.9.51) baseline; urgency=low
cinelerra, openshot-qt, pinta, uefitool, aosp, pdfmod, gnome-ring,
xcalc, zaproxy, kopete, cliqz, signal-desktop, kget, nheko, Enpass,
kwin_x11, krunner, ping, bsdtar, makepkg (Arch), archaudit-report
cower (Arch)
cower (Arch), kdeinit4
-- netblue30 <netblue30@yahoo.com> Thu, 9 Nov 2017 08:00:00 -0500

35
etc/kdeinit4.profile Normal file
View file

@ -0,0 +1,35 @@
# Firejail profile for kdeinit4
# This file is overwritten after every install/update
# Persistent local customizations
include /etc/firejail/kdeinit4.local
# Persistent global definitions
include /etc/firejail/globals.local
# use outside KDE Plasma 4
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc
include /etc/firejail/whitelist-var-common.inc
caps.drop all
netfilter
no3d
nogroups
nonewprivs
# nosound - disabled for knotify
noroot
novideo
notv
protocol unix,inet,inet6,netlink
seccomp
shell none
private-bin kdeinit4,kbuildsycoca4,kded4,knotify4
private-dev
private-tmp
noexec ${HOME}
noexec /tmp

View file

@ -180,6 +180,7 @@ k3b
karbon
kate
kcalc
# kdeinit4
kdenlive
keepass
keepass2