diff options
author | 2018-02-11 17:01:48 -0500 | |
---|---|---|
committer | 2018-02-11 17:01:48 -0500 | |
commit | c4a640f05acd675ee47452ab078dcc2abd229406 (patch) | |
tree | a230dbd0d62f7e287a952507309e06d1f349da33 | |
parent | Unify all Chromium and Firefox based browser profiles as part of #1773 (diff) | |
download | firejail-c4a640f05acd675ee47452ab078dcc2abd229406.tar.gz firejail-c4a640f05acd675ee47452ab078dcc2abd229406.tar.zst firejail-c4a640f05acd675ee47452ab078dcc2abd229406.zip |
Breakout noblacklists/whitelsits for common addons/plugins/programs from firefox-common
-rw-r--r-- | etc/firefox-common-addons.inc | 51 | ||||
-rw-r--r-- | etc/firefox-common.profile | 49 |
2 files changed, 54 insertions, 46 deletions
diff --git a/etc/firefox-common-addons.inc b/etc/firefox-common-addons.inc new file mode 100644 index 000000000..b480aae18 --- /dev/null +++ b/etc/firefox-common-addons.inc | |||
@@ -0,0 +1,51 @@ | |||
1 | # This file is overwritten during software install. | ||
2 | # Persistent customizations should go in a .local file. | ||
3 | include /etc/firejail/firefox-common-addons.local | ||
4 | |||
5 | noblacklist ${HOME}/.config/okularpartrc | ||
6 | noblacklist ${HOME}/.config/okularrc | ||
7 | noblacklist ${HOME}/.config/qpdfview | ||
8 | noblacklist ${HOME}/.kde/share/apps/kget | ||
9 | noblacklist ${HOME}/.kde/share/apps/okular | ||
10 | noblacklist ${HOME}/.kde/share/config/kgetrc | ||
11 | noblacklist ${HOME}/.kde/share/config/okularpartrc | ||
12 | noblacklist ${HOME}/.kde/share/config/okularrc | ||
13 | noblacklist ${HOME}/.kde4/share/apps/kget | ||
14 | noblacklist ${HOME}/.kde4/share/apps/okular | ||
15 | noblacklist ${HOME}/.kde4/share/config/kgetrc | ||
16 | noblacklist ${HOME}/.kde4/share/config/okularpartrc | ||
17 | noblacklist ${HOME}/.kde4/share/config/okularrc | ||
18 | # noblacklist ${HOME}/.local/share/gnome-shell/extensions | ||
19 | noblacklist ${HOME}/.local/share/okular | ||
20 | noblacklist ${HOME}/.local/share/qpdfview | ||
21 | |||
22 | whitelist ${HOME}/.cache/gnome-mplayer/plugin | ||
23 | whitelist ${HOME}/.config/gnome-mplayer | ||
24 | whitelist ${HOME}/.config/okularpartrc | ||
25 | whitelist ${HOME}/.config/okularrc | ||
26 | whitelist ${HOME}/.config/pipelight-silverlight5.1 | ||
27 | whitelist ${HOME}/.config/pipelight-widevine | ||
28 | whitelist ${HOME}/.config/qpdfview | ||
29 | whitelist ${HOME}/.kde/share/apps/kget | ||
30 | whitelist ${HOME}/.kde/share/apps/okular | ||
31 | whitelist ${HOME}/.kde/share/config/kgetrc | ||
32 | whitelist ${HOME}/.kde/share/config/okularpartrc | ||
33 | whitelist ${HOME}/.kde/share/config/okularrc | ||
34 | whitelist ${HOME}/.kde4/share/apps/kget | ||
35 | whitelist ${HOME}/.kde4/share/apps/okular | ||
36 | whitelist ${HOME}/.kde4/share/config/kgetrc | ||
37 | whitelist ${HOME}/.kde4/share/config/okularpartrc | ||
38 | whitelist ${HOME}/.kde4/share/config/okularrc | ||
39 | whitelist ${HOME}/.keysnail.js | ||
40 | whitelist ${HOME}/.lastpass | ||
41 | whitelist ${HOME}/.local/share/gnome-shell/extensions | ||
42 | whitelist ${HOME}/.local/share/okular | ||
43 | whitelist ${HOME}/.local/share/qpdfview | ||
44 | whitelist ${HOME}/.pentadactyl | ||
45 | whitelist ${HOME}/.pentadactylrc | ||
46 | whitelist ${HOME}/.vimperator | ||
47 | whitelist ${HOME}/.vimperatorrc | ||
48 | whitelist ${HOME}/.wine-pipelight | ||
49 | whitelist ${HOME}/.wine-pipelight64 | ||
50 | whitelist ${HOME}/.zotero | ||
51 | whitelist ${HOME}/dwhelper | ||
diff --git a/etc/firefox-common.profile b/etc/firefox-common.profile index 962080c58..33d522353 100644 --- a/etc/firefox-common.profile +++ b/etc/firefox-common.profile | |||
@@ -5,22 +5,9 @@ include /etc/firejail/firefox-common.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
7 | 7 | ||
8 | noblacklist ${HOME}/.config/okularpartrc | 8 | # uncomment the following line to allow access to common programs/addons/plugins |
9 | noblacklist ${HOME}/.config/okularrc | 9 | #include /etc/firejail/firefox-common-addons.inc |
10 | noblacklist ${HOME}/.config/qpdfview | 10 | |
11 | noblacklist ${HOME}/.kde/share/apps/kget | ||
12 | noblacklist ${HOME}/.kde/share/apps/okular | ||
13 | noblacklist ${HOME}/.kde/share/config/kgetrc | ||
14 | noblacklist ${HOME}/.kde/share/config/okularpartrc | ||
15 | noblacklist ${HOME}/.kde/share/config/okularrc | ||
16 | noblacklist ${HOME}/.kde4/share/apps/kget | ||
17 | noblacklist ${HOME}/.kde4/share/apps/okular | ||
18 | noblacklist ${HOME}/.kde4/share/config/kgetrc | ||
19 | noblacklist ${HOME}/.kde4/share/config/okularpartrc | ||
20 | noblacklist ${HOME}/.kde4/share/config/okularrc | ||
21 | # noblacklist ${HOME}/.local/share/gnome-shell/extensions | ||
22 | noblacklist ${HOME}/.local/share/okular | ||
23 | noblacklist ${HOME}/.local/share/qpdfview | ||
24 | noblacklist ${HOME}/.pki | 11 | noblacklist ${HOME}/.pki |
25 | 12 | ||
26 | include /etc/firejail/disable-common.inc | 13 | include /etc/firejail/disable-common.inc |
@@ -29,37 +16,7 @@ include /etc/firejail/disable-programs.inc | |||
29 | 16 | ||
30 | mkdir ${HOME}/.pki | 17 | mkdir ${HOME}/.pki |
31 | whitelist ${DOWNLOADS} | 18 | whitelist ${DOWNLOADS} |
32 | whitelist ${HOME}/.cache/gnome-mplayer/plugin | ||
33 | whitelist ${HOME}/.config/gnome-mplayer | ||
34 | whitelist ${HOME}/.config/okularpartrc | ||
35 | whitelist ${HOME}/.config/okularrc | ||
36 | whitelist ${HOME}/.config/pipelight-silverlight5.1 | ||
37 | whitelist ${HOME}/.config/pipelight-widevine | ||
38 | whitelist ${HOME}/.config/qpdfview | ||
39 | whitelist ${HOME}/.kde/share/apps/kget | ||
40 | whitelist ${HOME}/.kde/share/apps/okular | ||
41 | whitelist ${HOME}/.kde/share/config/kgetrc | ||
42 | whitelist ${HOME}/.kde/share/config/okularpartrc | ||
43 | whitelist ${HOME}/.kde/share/config/okularrc | ||
44 | whitelist ${HOME}/.kde4/share/apps/kget | ||
45 | whitelist ${HOME}/.kde4/share/apps/okular | ||
46 | whitelist ${HOME}/.kde4/share/config/kgetrc | ||
47 | whitelist ${HOME}/.kde4/share/config/okularpartrc | ||
48 | whitelist ${HOME}/.kde4/share/config/okularrc | ||
49 | whitelist ${HOME}/.keysnail.js | ||
50 | whitelist ${HOME}/.lastpass | ||
51 | whitelist ${HOME}/.local/share/gnome-shell/extensions | ||
52 | whitelist ${HOME}/.local/share/okular | ||
53 | whitelist ${HOME}/.local/share/qpdfview | ||
54 | whitelist ${HOME}/.pentadactyl | ||
55 | whitelist ${HOME}/.pentadactylrc | ||
56 | whitelist ${HOME}/.pki | 19 | whitelist ${HOME}/.pki |
57 | whitelist ${HOME}/.vimperator | ||
58 | whitelist ${HOME}/.vimperatorrc | ||
59 | whitelist ${HOME}/.wine-pipelight | ||
60 | whitelist ${HOME}/.wine-pipelight64 | ||
61 | whitelist ${HOME}/.zotero | ||
62 | whitelist ${HOME}/dwhelper | ||
63 | include /etc/firejail/whitelist-common.inc | 20 | include /etc/firejail/whitelist-common.inc |
64 | include /etc/firejail/whitelist-var-common.inc | 21 | include /etc/firejail/whitelist-var-common.inc |
65 | 22 | ||