kwin_x11.profile 818 Bytes
Newer Older
1 2 3
# Firejail profile for kwin_x11
# This file is overwritten after every install/update
# Persistent local customizations
4
include kwin_x11.local
5
# Persistent global definitions
6
include globals.local
7

8
noblacklist ${HOME}/.cache/kwin
9 10 11 12
noblacklist ${HOME}/.config/kwinrc
noblacklist ${HOME}/.config/kwinrulesrc
noblacklist ${HOME}/.local/share/kwin

13 14 15 16 17
include disable-common.inc
include disable-devel.inc
include disable-interpreters.inc
include disable-passwdmgr.inc
include disable-programs.inc
18
include disable-xdg.inc
19

20
include whitelist-var-common.inc
21 22 23 24 25 26 27 28 29

caps.drop all
netfilter
nodvd
nogroups
nonewprivs
noroot
nosound
notv
30
nou2f
31 32 33 34 35 36 37 38 39
novideo
protocol unix
seccomp
shell none
tracelog

disable-mnt
private-bin kwin_x11
private-dev
40
private-etc drirc,fonts,kde5rc,ld.so.cache,machine-id,xdg
41 42
private-tmp

43
noexec ${HOME}
44
noexec /tmp