gitg.profile 781 Bytes
Newer Older
Tad's avatar
Tad committed
1
# Firejail profile for gitg
2
# Description: Git repository viewer
Tad's avatar
Tad committed
3 4
# This file is overwritten after every install/update
# Persistent local customizations
5
include gitg.local
Tad's avatar
Tad committed
6
# Persistent global definitions
7
include globals.local
Tad's avatar
Tad committed
8 9 10

noblacklist ${HOME}/.gitconfig
noblacklist ${HOME}/.local/share/gitg
Tad's avatar
Tad committed
11
noblacklist ${HOME}/.ssh
Tad's avatar
Tad committed
12

13 14 15 16 17 18 19
include disable-common.inc
include disable-devel.inc
include disable-interpreters.inc
include disable-passwdmgr.inc
include disable-programs.inc

include whitelist-var-common.inc
Tad's avatar
Tad committed
20 21 22

caps.drop all
no3d
Tad's avatar
Tad committed
23
nodvd
Tad's avatar
Tad committed
24 25 26 27
nogroups
nonewprivs
noroot
nosound
Tad's avatar
Tad committed
28
notv
29
nou2f
Tad's avatar
Tad committed
30 31 32 33 34
novideo
protocol unix,inet,inet6
seccomp
shell none

35
private-bin gitg,git,ssh
36
private-cache
Tad's avatar
Tad committed
37 38 39
private-dev
private-tmp

Tad's avatar
Tad committed
40 41
# mdwe breaks diff in older versions
#memory-deny-write-execute
Tad's avatar
Tad committed
42 43
noexec ${HOME}
noexec /tmp