aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar kortewegdevries <kortewegdevries@protonmail.ch>2020-09-02 10:34:14 +0000
committerLibravatar GitHub <noreply@github.com>2020-09-02 10:34:14 +0000
commita5e2b31c6263665854a449552649f6538f35a9fc (patch)
treef3e678f5137906f226a7f1b0d5002fa80e8d93b2
parentMerge branch 'master' of https://github.com/netblue30/firejail (diff)
downloadfirejail-a5e2b31c6263665854a449552649f6538f35a9fc.tar.gz
firejail-a5e2b31c6263665854a449552649f6538f35a9fc.tar.zst
firejail-a5e2b31c6263665854a449552649f6538f35a9fc.zip
Various profiles (#3561)
* Various profiles Initial * Various fixes # 1 Removed blacklist,no3d; added icon flatpak paths;sorting;added space
Diffstat
-rw-r--r--etc/inc/disable-programs.inc2
-rw-r--r--etc/profile-a-l/kazam.profile54
-rw-r--r--etc/profile-m-z/menulibre.profile65
-rw-r--r--etc/profile-m-z/musictube.profile57
-rw-r--r--etc/profile-m-z/onboard.profile55
-rw-r--r--src/firecfg/firecfg.config4
6 files changed, 237 insertions, 0 deletions
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc
index e5dd9cb59..92cde6d56 100644
--- a/etc/inc/disable-programs.inc
+++ b/etc/inc/disable-programs.inc
@@ -258,6 +258,7 @@ blacklist ${HOME}/.config/katerc
258blacklist ${HOME}/.config/kateschemarc 258blacklist ${HOME}/.config/kateschemarc
259blacklist ${HOME}/.config/katesyntaxhighlightingrc 259blacklist ${HOME}/.config/katesyntaxhighlightingrc
260blacklist ${HOME}/.config/katevirc 260blacklist ${HOME}/.config/katevirc
261blacklist ${HOME}/.config/kazam
261blacklist ${HOME}/.config/kdeconnect 262blacklist ${HOME}/.config/kdeconnect
262blacklist ${HOME}/.config/kdenliverc 263blacklist ${HOME}/.config/kdenliverc
263blacklist ${HOME}/.config/kfindrc 264blacklist ${HOME}/.config/kfindrc
@@ -312,6 +313,7 @@ blacklist ${HOME}/.config/nuclear
312blacklist ${HOME}/.config/obs-studio 313blacklist ${HOME}/.config/obs-studio
313blacklist ${HOME}/.config/okularpartrc 314blacklist ${HOME}/.config/okularpartrc
314blacklist ${HOME}/.config/okularrc 315blacklist ${HOME}/.config/okularrc
316blacklist ${HOME}/.config/onboard
315blacklist ${HOME}/.config/onionshare 317blacklist ${HOME}/.config/onionshare
316blacklist ${HOME}/.config/onlyoffice 318blacklist ${HOME}/.config/onlyoffice
317blacklist ${HOME}/.config/opera 319blacklist ${HOME}/.config/opera
diff --git a/etc/profile-a-l/kazam.profile b/etc/profile-a-l/kazam.profile
new file mode 100644
index 000000000..9899ff195
--- /dev/null
+++ b/etc/profile-a-l/kazam.profile
@@ -0,0 +1,54 @@
1# Firejail profile for kazam
2# Description: Screen capture tool
3# This file is overwritten after every install/update
4# Persistent local customizations
5include kazam.local
6# Persistent global definitions
7include globals.local
8
9ignore noexec ${HOME}
10
11noblacklist ${PICTURES}
12noblacklist ${VIDEOS}
13noblacklist ${HOME}/.config/kazam
14
15include allow-python2.inc
16include allow-python3.inc
17
18include disable-common.inc
19include disable-devel.inc
20include disable-exec.inc
21include disable-interpreters.inc
22include disable-programs.inc
23include disable-passwdmgr.inc
24include disable-shell.inc
25include disable-xdg.inc
26
27whitelist /usr/share/kazam
28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc
30include whitelist-var-common.inc
31
32apparmor
33caps.drop all
34net none
35nodvd
36nogroups
37nonewprivs
38noroot
39notv
40nou2f
41novideo
42protocol unix
43seccomp
44shell none
45tracelog
46
47disable-mnt
48# private-bin kazam,python*
49private-cache
50private-dev
51private-etc alsa,alternatives,asound.conf,dconf,fonts,gtk-2.0,gtk-3.0,machine-id,pulse,selinux,X11,xdg
52private-tmp
53
54dbus-system none
diff --git a/etc/profile-m-z/menulibre.profile b/etc/profile-m-z/menulibre.profile
new file mode 100644
index 000000000..f029e4696
--- /dev/null
+++ b/etc/profile-m-z/menulibre.profile
@@ -0,0 +1,65 @@
1# Firejail profile for menulibre
2# Description: Create desktop and menu launchers easily
3# This file is overwritten after every install/update
4# Persistent local customizations
5include menulibre.local
6# Persistent global definitions
7include globals.local
8
9include allow-python2.inc
10include allow-python3.inc
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-programs.inc
17include disable-passwdmgr.inc
18include disable-xdg.inc
19
20# Whitelist your system icon directory,varies by distro
21whitelist /usr/share/app-info
22whitelist /usr/share/desktop-directories
23whitelist /usr/share/icons
24whitelist /usr/share/menulibre
25whitelist /var/lib/app-info/icons
26# Flatpak desktop directory
27whitelist /var/lib/flatpak/exports/share/applications
28whitelist /var/lib/flatpak/exports/share/icons
29# Snap desktop directory
30
31include whitelist-runuser-common.inc
32include whitelist-usr-share-common.inc
33include whitelist-var-common.inc
34
35apparmor
36caps.drop all
37machine-id
38net none
39nodvd
40no3d
41nogroups
42nonewprivs
43noroot
44nosound
45notv
46nou2f
47novideo
48protocol unix
49seccomp
50shell none
51tracelog
52
53disable-mnt
54private-cache
55private-dev
56private-etc alternatives,dconf,fonts,gtk-3.0,locale.alias,locale.conf,mime.types,nsswitch.conf,passwd,pki,selinux,X11,xdg
57private-tmp
58
59dbus-user none
60dbus-system none
61
62read-write ${HOME}/.config/menus
63read-write ${HOME}/.gnome/apps
64read-write ${HOME}/.local/share/applications
65read-write ${HOME}/.local/share/flatpak/exports
diff --git a/etc/profile-m-z/musictube.profile b/etc/profile-m-z/musictube.profile
new file mode 100644
index 000000000..955df698d
--- /dev/null
+++ b/etc/profile-m-z/musictube.profile
@@ -0,0 +1,57 @@
1# Firejail profile for musictube
2# Description: Stream music
3# This file is overwritten after every install/update
4# Persistent local customizations
5include musictube.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.cache/Flavio Tordini
10noblacklist ${HOME}/.config/Flavio Tordini
11noblacklist ${HOME}/.local/share/Flavio Tordini
12
13include disable-common.inc
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19include disable-shell.inc
20include disable-xdg.inc
21
22mkdir ${HOME}/.cache/Flavio Tordini
23mkdir ${HOME}/.config/Flavio Tordini
24mkdir ${HOME}/.local/share/Flavio Tordini
25whitelist ${HOME}/.cache/Flavio Tordini
26whitelist ${HOME}/.config/Flavio Tordini
27whitelist ${HOME}/.local/share/Flavio Tordini
28whitelist /usr/share/musictube
29include whitelist-common.inc
30include whitelist-runuser-common.inc
31include whitelist-usr-share-common.inc
32include whitelist-var-common.inc
33
34apparmor
35caps.drop all
36netfilter
37nodvd
38nogroups
39nonewprivs
40noroot
41notv
42nou2f
43novideo
44protocol unix,inet,inet6,netlink
45seccomp
46shell none
47tracelog
48
49disable-mnt
50private-bin musictube
51private-cache
52private-dev
53private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,drirc,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id,mime.types,nsswitch.conf,pki,pulse,resolv.conf,selinux,ssl,X11,xdg
54private-tmp
55
56dbus-user none
57dbus-system none
diff --git a/etc/profile-m-z/onboard.profile b/etc/profile-m-z/onboard.profile
new file mode 100644
index 000000000..3a235a677
--- /dev/null
+++ b/etc/profile-m-z/onboard.profile
@@ -0,0 +1,55 @@
1# Firejail profile for onboard
2# Description: On-screen keyboard
3# This file is overwritten after every install/update
4# Persistent local customizations
5include onboard.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/onboard
10
11include allow-python2.inc
12include allow-python3.inc
13
14include disable-common.inc
15include disable-devel.inc
16include disable-exec.inc
17include disable-interpreters.inc
18include disable-programs.inc
19include disable-passwdmgr.inc
20include disable-shell.inc
21include disable-xdg.inc
22
23mkdir ${HOME}/.config/onboard
24whitelist ${HOME}/.config/onboard
25whitelist /usr/share/onboard
26include whitelist-common.inc
27include whitelist-usr-share-common.inc
28include whitelist-runuser-common.inc
29include whitelist-var-common.inc
30
31apparmor
32caps.drop all
33machine-id
34net none
35nodvd
36no3d
37nogroups
38nonewprivs
39noroot
40notv
41nou2f
42novideo
43protocol unix
44seccomp
45shell none
46tracelog
47
48disable-mnt
49private-cache
50private-bin onboard,python*,tput
51private-dev
52private-etc alternatives,dbus-1,dconf,fonts,gtk-2.0,gtk-3.0,locale,locale.alias,locale.conf,mime.types,selinux,X11,xdg
53private-tmp
54
55dbus-system none
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 0574daae6..ce2c6995e 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -373,6 +373,7 @@ kalgebra
373kalgebramobile 373kalgebramobile
374karbon 374karbon
375kate 375kate
376kazam
376kcalc 377kcalc
377# kdeinit4 378# kdeinit4
378kdenlive 379kdenlive
@@ -455,6 +456,7 @@ megaglest_editor
455meld 456meld
456mencoder 457mencoder
457mendeleydesktop 458mendeleydesktop
459menulibre
458meteo-qt 460meteo-qt
459midori 461midori
460min 462min
@@ -502,6 +504,7 @@ mupdf-x11-curl
502mupen64plus 504mupen64plus
503muraster 505muraster
504musescore 506musescore
507musictube
505musixmatch 508musixmatch
506mutool 509mutool
507mutt 510mutt
@@ -534,6 +537,7 @@ ocenaudio
534odt2txt 537odt2txt
535oggsplt 538oggsplt
536okular 539okular
540onboard
537onionshare-gui 541onionshare-gui
538ooffice 542ooffice
539ooviewdoc 543ooviewdoc
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-06-17 22:11:44 +0000