diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2021-12-09 14:46:15 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2021-12-09 14:46:15 -0300 |
| commit | 513828c6c3503b9b9b5acfebd58ba5a004e3a3da (patch) | |
| tree | 10b35aaefd6f00e7049366533f210aa3bb74b8d6 | |
| parent | 5d06e2adce380c1460f8c0f4b3195d2b453801c0 (diff) | |
| download | zathura-513828c6c3503b9b9b5acfebd58ba5a004e3a3da.tar.gz zathura-513828c6c3503b9b9b5acfebd58ba5a004e3a3da.tar.bz2 | |
Feat: adds zathura profile
| -rw-r--r-- | config.dot/firejail/zathura.profile.link | 63 |
1 files changed, 63 insertions, 0 deletions
diff --git a/config.dot/firejail/zathura.profile.link b/config.dot/firejail/zathura.profile.link new file mode 100644 index 0000000..854abab --- /dev/null +++ b/config.dot/firejail/zathura.profile.link @@ -0,0 +1,63 @@ +# Firejail profile for zathura +# Description: Document viewer with a minimalistic interface +# This file is overwritten after every install/update +# Persistent local customizations +include zathura.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.config/zathura +noblacklist ${HOME}/.local/share/zathura +noblacklist ${DOCUMENTS} + +# See https://github.com/netblue30/firejail/issues/1654 +#noblacklist /run/user/*/bus + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.config/zathura +mkdir ${HOME}/.local/share/zathura +whitelist /usr/share/doc +whitelist /usr/share/zathura +include whitelist-usr-share-common.inc +include whitelist-var-common.inc +include whitelist-common.local + +apparmor +caps.drop all +machine-id +net none +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix +seccomp +shell none +tracelog + +private-bin zathura +private-cache +private-dev +private-etc alternatives,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id +# private-lib has problems on Debian 10 +#private-lib gcc/*/*/libgcc_s.so.*,gcc/*/*/libstdc++.so.*,libarchive.so.*,libdjvulibre.so.*,libgirara-gtk*,libpoppler-glib.so.*,libspectre.so.*,zathura +private-tmp + +dbus-user none +dbus-system none + +read-only ${HOME} +read-write ${HOME}/.config/zathura +read-write ${HOME}/.local/share/zathura |