firejail/etc/gitg.profile
rusty-snake 2373fcd74d many profile fixes (1)
- add novideo to a lot of profiles
   (there are still more profiles where novideo can be added)
 - remove commente mdwe from some gnome applications
 - add descriptions to some profiles
 - blacklist ${HOME}/.cargo/credentials
 - move ${HOME}/.git-credentials and ${HOME}/.git-credential-cache to
   'top secret' in disable-common.inc
 - some ordering in disable-programs.inc
 - merge tor browser blacklists to ${HOME}/.tor-browser*
 - qupzilla.profile redirect to falkon.profile
 - blacklist gnome-builder paths
 - fix transmission profiles inlude
 - much more
2019-08-26 00:22:59 +02:00

42 lines
793 B
Text

# Firejail profile for gitg
# Description: Git repository viewer
# This file is overwritten after every install/update
# Persistent local customizations
include gitg.local
# Persistent global definitions
include globals.local
noblacklist ${HOME}/.config/git
noblacklist ${HOME}/.gitconfig
noblacklist ${HOME}/.git-credentials
noblacklist ${HOME}/.local/share/gitg
noblacklist ${HOME}/.ssh
include disable-common.inc
include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-passwdmgr.inc
include disable-programs.inc
include whitelist-var-common.inc
caps.drop all
netfilter
no3d
nodvd
nogroups
nonewprivs
noroot
nosound
notv
nou2f
novideo
protocol unix,inet,inet6
seccomp
shell none
private-bin git,gitg,ssh
private-cache
private-dev
private-tmp