aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2020-03-15 12:55:09 +0100
committerLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2020-03-15 12:55:09 +0100
commit35443058b6539e8ed251c40bd342912a7e2c1484 (patch)
tree106b848faf3ab7eb27dfbb2b3490fcc9d7949633
parentUpdate file.profile (diff)
downloadfirejail-35443058b6539e8ed251c40bd342912a7e2c1484.tar.gz
firejail-35443058b6539e8ed251c40bd342912a7e2c1484.tar.zst
firejail-35443058b6539e8ed251c40bd342912a7e2c1484.zip
add gnome-screenshot.profile
patch for xdg-dbus-proxy ``` --- a/etc/gnome-screenshot.profile +++ b/etc/gnome-screenshot.profile @@ -45,3 +45,8 @@ private-bin gnome-screenshot private-dev private-etc dconf,fonts,gtk-3.0,localtime,machine-id private-tmp + +dbus-user filter +dbus-user.own org.gnome.Screenshot +dbus-user.talk org.gnome.Shell.Screenshot +dbus-system block ``` patch for whitelist-runuser-common.inc ``` --- a/etc/gnome-screenshot.profile +++ b/etc/gnome-screenshot.profile @@ -17,11 +17,8 @@ include disable-passwdmgr.inc include disable-programs.inc include disable-xdg.inc -whitelist ${RUNUSER}/bus -whitelist ${RUNUSER}/pulse -whitelist ${RUNUSER}/gdm/Xauthority -whitelist ${RUNUSER}/wayland-0 include whitelist-usr-share-common.inc +include whitelist-runuser-common.inc include whitelist-var-common.inc apparmor ```
-rw-r--r--README.md2
-rw-r--r--RELNOTES2
-rw-r--r--etc/Screenshot.profile6
-rw-r--r--etc/disable-programs.inc1
-rw-r--r--etc/gnome-screenshot.profile47
-rw-r--r--src/firecfg/firecfg.config2
6 files changed, 58 insertions, 2 deletions
diff --git a/README.md b/README.md
index bc2708041..8fc636194 100644
--- a/README.md
+++ b/README.md
@@ -151,4 +151,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe
151 151
152### New profiles: 152### New profiles:
153 153
154gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, gnome-passwordsafe, bibtex, gummi, latex, pdflatex, tex, wpp, wpspdf, wps, et, multimc, gnome-hexgl, com.github.johnfactotum.Foliate, desktopeditors, impressive, mupdf-gl, mupdf-x11, mupdf-x11-curl, muraster, mutool, planmaker18, planmaker18free, presentations18, presentations18free, textmaker18, textmaker18free, teams, xournal 154gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, gnome-passwordsafe, bibtex, gummi, latex, pdflatex, tex, wpp, wpspdf, wps, et, multimc, gnome-hexgl, com.github.johnfactotum.Foliate, desktopeditors, impressive, mupdf-gl, mupdf-x11, mupdf-x11-curl, muraster, mutool, planmaker18, planmaker18free, presentations18, presentations18free, textmaker18, textmaker18free, teams, xournal, gnome-screenshot
diff --git a/RELNOTES b/RELNOTES
index df0e3ec85..664696cce 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -8,7 +8,7 @@ firejail (0.9.63) baseline; urgency=low
8 * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool 8 * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
9 * new profiles: desktopeditors, impressive, planmaker18, planmaker18free 9 * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
10 * new profiles: presentations18, presentations18free, textmaker18, teams 10 * new profiles: presentations18, presentations18free, textmaker18, teams
11 * new profiles: textmaker18free, xournal 11 * new profiles: textmaker18free, xournal, gnome-screenshot
12 12
13firejail (0.9.62) baseline; urgency=low 13firejail (0.9.62) baseline; urgency=low
14 * added file-copy-limit in /etc/firejail/firejail.config 14 * added file-copy-limit in /etc/firejail/firejail.config
diff --git a/etc/Screenshot.profile b/etc/Screenshot.profile
new file mode 100644
index 000000000..d4b083736
--- /dev/null
+++ b/etc/Screenshot.profile
@@ -0,0 +1,6 @@
1# Firejail profile for gnome-screenshot
2# This file is overwritten after every install/update
3
4# Temporary fix for https://github.com/netblue30/firejail/issues/2624
5# Redirect
6include gnome-screenshot.profile
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index db257c1b6..0786ba7d2 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -759,6 +759,7 @@ blacklist ${HOME}/.cache/gfeeds
759blacklist ${HOME}/.cache/gimp 759blacklist ${HOME}/.cache/gimp
760blacklist ${HOME}/.cache/gnome-builder 760blacklist ${HOME}/.cache/gnome-builder
761blacklist ${HOME}/.cache/gnome-recipes 761blacklist ${HOME}/.cache/gnome-recipes
762blacklist ${HOME}/.cache/gnome-screenshot
762blacklist ${HOME}/.cache/gnome-twitch 763blacklist ${HOME}/.cache/gnome-twitch
763blacklist ${HOME}/.cache/godot 764blacklist ${HOME}/.cache/godot
764blacklist ${HOME}/.cache/google-chrome 765blacklist ${HOME}/.cache/google-chrome
diff --git a/etc/gnome-screenshot.profile b/etc/gnome-screenshot.profile
new file mode 100644
index 000000000..c00aefdb7
--- /dev/null
+++ b/etc/gnome-screenshot.profile
@@ -0,0 +1,47 @@
1# Firejail profile for gnome-screenshot
2# Description: GNOME screenshot tool
3# This file is overwritten after every install/update
4# Persistent local customizations
5include gnome-screenshot.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${PICTURES}
10noblacklist ${HOME}/.cache/gnome-screenshot
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18include disable-xdg.inc
19
20whitelist ${RUNUSER}/bus
21whitelist ${RUNUSER}/pulse
22whitelist ${RUNUSER}/gdm/Xauthority
23whitelist ${RUNUSER}/wayland-0
24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc
26
27apparmor
28caps.drop all
29net none
30no3d
31nodvd
32nogroups
33nonewprivs
34noroot
35notv
36nou2f
37novideo
38protocol unix
39seccomp
40shell none
41tracelog
42
43disable-mnt
44private-bin gnome-screenshot
45private-dev
46private-etc dconf,fonts,gtk-3.0,localtime,machine-id
47private-tmp
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 4cd4fad6c..c27f78d0f 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -23,6 +23,7 @@ Natron
23PPSSPPQt 23PPSSPPQt
24QMediathekView 24QMediathekView
25QOwnNotes 25QOwnNotes
26Screenshot
26Telegram 27Telegram
27Viber 28Viber
28VirtualBox 29VirtualBox
@@ -275,6 +276,7 @@ gnome-passwordsafe
275gnome-photos 276gnome-photos
276gnome-recipes 277gnome-recipes
277gnome-schedule 278gnome-schedule
279gnome-screenshot
278gnome-system-log 280gnome-system-log
279gnome-twitch 281gnome-twitch
280gnome-weather 282gnome-weather