aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar kortewegdevries <kortewegdevries@protonmail.ch>2020-09-02 10:40:51 +0000
committerLibravatar GitHub <noreply@github.com>2020-09-02 10:40:51 +0000
commitfa28d0ec87146a718219bbd7addf6a6994c6bf37 (patch)
tree9213d9d07f5d534613e675e679ae0049e9435c37
parentVarious profiles (#3561) (diff)
downloadfirejail-fa28d0ec87146a718219bbd7addf6a6994c6bf37.tar.gz
firejail-fa28d0ec87146a718219bbd7addf6a6994c6bf37.tar.zst
firejail-fa28d0ec87146a718219bbd7addf6a6994c6bf37.zip
Various profiles # 2 (#3566)
* Matrix clients Initial * Add profile for fractal, # 1139 * Fixes
Diffstat
-rw-r--r--etc/inc/disable-programs.inc8
-rw-r--r--etc/profile-a-l/fractal.profile54
-rw-r--r--etc/profile-m-z/mirage.profile59
-rw-r--r--etc/profile-m-z/quaternion.profile54
-rw-r--r--etc/profile-m-z/spectral.profile53
-rw-r--r--src/firecfg/firecfg.config4
6 files changed, 232 insertions, 0 deletions
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc
index 92cde6d56..dba60fcba 100644
--- a/etc/inc/disable-programs.inc
+++ b/etc/inc/disable-programs.inc
@@ -83,6 +83,7 @@ blacklist ${HOME}/.config/Debauchee/Barrier.conf
83blacklist ${HOME}/.config/Dharkael 83blacklist ${HOME}/.config/Dharkael
84blacklist ${HOME}/.config/Element 84blacklist ${HOME}/.config/Element
85blacklist ${HOME}/.config/Element (Riot) 85blacklist ${HOME}/.config/Element (Riot)
86blacklist ${HOME}/.config/ENCOM
86blacklist ${HOME}/.config/Enox 87blacklist ${HOME}/.config/Enox
87blacklist ${HOME}/.config/Ferdi 88blacklist ${HOME}/.config/Ferdi
88blacklist ${HOME}/.config/Flavio Tordini 89blacklist ${HOME}/.config/Flavio Tordini
@@ -122,6 +123,7 @@ blacklist ${HOME}/.config/QMediathekView
122blacklist ${HOME}/.config/Qlipper 123blacklist ${HOME}/.config/Qlipper
123blacklist ${HOME}/.config/QuiteRss 124blacklist ${HOME}/.config/QuiteRss
124blacklist ${HOME}/.config/QuiteRssrc 125blacklist ${HOME}/.config/QuiteRssrc
126blacklist ${HOME}/.config/Quotient
125blacklist ${HOME}/.config/Rambox 127blacklist ${HOME}/.config/Rambox
126blacklist ${HOME}/.config/Riot 128blacklist ${HOME}/.config/Riot
127blacklist ${HOME}/.config/Rocket.Chat 129blacklist ${HOME}/.config/Rocket.Chat
@@ -292,6 +294,7 @@ blacklist ${HOME}/.config/menulibre.cfg
292blacklist ${HOME}/.config/mfusion 294blacklist ${HOME}/.config/mfusion
293blacklist ${HOME}/.config/Microsoft 295blacklist ${HOME}/.config/Microsoft
294blacklist ${HOME}/.config/midori 296blacklist ${HOME}/.config/midori
297blacklist ${HOME}/.config/mirage
295blacklist ${HOME}/.config/mono 298blacklist ${HOME}/.config/mono
296blacklist ${HOME}/.config/mpDris2 299blacklist ${HOME}/.config/mpDris2
297blacklist ${HOME}/.config/mpd 300blacklist ${HOME}/.config/mpd
@@ -639,6 +642,7 @@ blacklist ${HOME}/.local/share/mana
639blacklist ${HOME}/.local/share/maps-places.json 642blacklist ${HOME}/.local/share/maps-places.json
640blacklist ${HOME}/.local/share/meld 643blacklist ${HOME}/.local/share/meld
641blacklist ${HOME}/.local/share/midori 644blacklist ${HOME}/.local/share/midori
645blacklist ${HOME}/.local/share/mirage
642blacklist ${HOME}/.local/share/multimc 646blacklist ${HOME}/.local/share/multimc
643blacklist ${HOME}/.local/share/multimc5 647blacklist ${HOME}/.local/share/multimc5
644blacklist ${HOME}/.local/share/mupen64plus 648blacklist ${HOME}/.local/share/mupen64plus
@@ -817,6 +821,7 @@ blacklist ${HOME}/.cache/8pecxstudios
817blacklist ${HOME}/.cache/Authenticator 821blacklist ${HOME}/.cache/Authenticator
818blacklist ${HOME}/.cache/BraveSoftware 822blacklist ${HOME}/.cache/BraveSoftware
819blacklist ${HOME}/.cache/Clementine 823blacklist ${HOME}/.cache/Clementine
824blacklist ${HOME}/.cache/ENCOM/Spectral
820blacklist ${HOME}/.cache/Enox 825blacklist ${HOME}/.cache/Enox
821blacklist ${HOME}/.cache/Enpass 826blacklist ${HOME}/.cache/Enpass
822blacklist ${HOME}/.cache/Ferdi 827blacklist ${HOME}/.cache/Ferdi
@@ -827,6 +832,7 @@ blacklist ${HOME}/.cache/MusicBrainz
827blacklist ${HOME}/.cache/NewsFlashGTK 832blacklist ${HOME}/.cache/NewsFlashGTK
828blacklist ${HOME}/.cache/Otter 833blacklist ${HOME}/.cache/Otter
829blacklist ${HOME}/.cache/QuiteRss 834blacklist ${HOME}/.cache/QuiteRss
835blacklist ${HOME}/.cache/Quotient/quaternion
830blacklist ${HOME}/.cache/Shortwave 836blacklist ${HOME}/.cache/Shortwave
831blacklist ${HOME}/.cache/Tox 837blacklist ${HOME}/.cache/Tox
832blacklist ${HOME}/.cache/Zeal 838blacklist ${HOME}/.cache/Zeal
@@ -856,6 +862,7 @@ blacklist ${HOME}/.cache/falkon
856blacklist ${HOME}/.cache/feedreader 862blacklist ${HOME}/.cache/feedreader
857blacklist ${HOME}/.cache/font-manager 863blacklist ${HOME}/.cache/font-manager
858blacklist ${HOME}/.cache/fossamail 864blacklist ${HOME}/.cache/fossamail
865blacklist ${HOME}/.cache/fractal
859blacklist ${HOME}/.cache/freecol 866blacklist ${HOME}/.cache/freecol
860blacklist ${HOME}/.cache/gajim 867blacklist ${HOME}/.cache/gajim
861blacklist ${HOME}/.cache/gegl-0.4 868blacklist ${HOME}/.cache/gegl-0.4
@@ -897,6 +904,7 @@ blacklist ${HOME}/.cache/liferea
897blacklist ${HOME}/.cache/Mendeley Ltd. 904blacklist ${HOME}/.cache/Mendeley Ltd.
898blacklist ${HOME}/.cache/midori 905blacklist ${HOME}/.cache/midori
899blacklist ${HOME}/.cache/minetest 906blacklist ${HOME}/.cache/minetest
907blacklist ${HOME}/.cache/mirage
900blacklist ${HOME}/.cache/moonchild productions/basilisk 908blacklist ${HOME}/.cache/moonchild productions/basilisk
901blacklist ${HOME}/.cache/moonchild productions/pale moon 909blacklist ${HOME}/.cache/moonchild productions/pale moon
902blacklist ${HOME}/.cache/mozilla 910blacklist ${HOME}/.cache/mozilla
diff --git a/etc/profile-a-l/fractal.profile b/etc/profile-a-l/fractal.profile
new file mode 100644
index 000000000..ab907eb0d
--- /dev/null
+++ b/etc/profile-a-l/fractal.profile
@@ -0,0 +1,54 @@
1# Firejail profile for fractal
2# Description: Desktop client for Matrix
3# This file is overwritten after every install/update
4# Persistent local customizations
5include fractal.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.cache/fractal
10
11include disable-common.inc
12include disable-devel.inc
13include disable-exec.inc
14include disable-interpreters.inc
15include disable-passwdmgr.inc
16include disable-programs.inc
17include disable-shell.inc
18include disable-xdg.inc
19
20mkdir ${HOME}/.cache/fractal
21whitelist ${HOME}/.cache/fractal
22whitelist ${DOWNLOADS}
23include whitelist-common.inc
24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc
27
28apparmor
29caps.drop all
30netfilter
31nodvd
32nogroups
33nonewprivs
34noroot
35notv
36nou2f
37protocol unix,inet,inet6
38seccomp
39shell none
40tracelog
41
42disable-mnt
43private-bin fractal
44private-cache
45private-dev
46private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,mime.types,nsswitch.conf,pki,pulse,resolv.conf,selinux,ssl,X11,xdg
47private-tmp
48
49dbus-user filter
50dbus-user.own org.gnome.Fractal
51dbus-user.talk ca.desrt.dconf
52dbus-user.talk org.freedesktop.secrets
53dbus-user.talk org.freedesktop.Notifications
54dbus-system none
diff --git a/etc/profile-m-z/mirage.profile b/etc/profile-m-z/mirage.profile
new file mode 100644
index 000000000..4a5f12aec
--- /dev/null
+++ b/etc/profile-m-z/mirage.profile
@@ -0,0 +1,59 @@
1# Firejail profile for mirage
2# Description: Desktop client for Matrix
3# This file is overwritten after every install/update
4# Persistent local customizations
5include mirage.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.cache/mirage
10noblacklist ${HOME}/.config/mirage
11noblacklist ${HOME}/.local/share/mirage
12
13include allow-python2.inc
14include allow-python3.inc
15
16include disable-common.inc
17include disable-devel.inc
18include disable-exec.inc
19include disable-interpreters.inc
20include disable-passwdmgr.inc
21include disable-programs.inc
22include disable-shell.inc
23include disable-xdg.inc
24
25mkdir ${HOME}/.cache/mirage
26mkdir ${HOME}/.config/mirage
27mkdir ${HOME}/.local/share/mirage
28whitelist ${HOME}/.cache/mirage
29whitelist ${HOME}/.config/mirage
30whitelist ${HOME}/.local/share/mirage
31whitelist ${DOWNLOADS}
32include whitelist-common.inc
33include whitelist-runuser-common.inc
34include whitelist-usr-share-common.inc
35include whitelist-var-common.inc
36
37apparmor
38caps.drop all
39netfilter
40nodvd
41nogroups
42nonewprivs
43noroot
44notv
45nou2f
46protocol unix,inet,inet6
47seccomp
48shell none
49tracelog
50
51disable-mnt
52private-bin mirage
53private-cache
54private-dev
55private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,mime.types,nsswitch.conf,pki,pulse,resolv.conf,selinux,ssl,X11,xdg
56private-tmp
57
58dbus-user none
59dbus-system none
diff --git a/etc/profile-m-z/quaternion.profile b/etc/profile-m-z/quaternion.profile
new file mode 100644
index 000000000..2133c74d3
--- /dev/null
+++ b/etc/profile-m-z/quaternion.profile
@@ -0,0 +1,54 @@
1# Firejail profile for quaternion
2# Description: Desktop client for Matrix
3# This file is overwritten after every install/update
4# Persistent local customizations
5include quaternion.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.cache/Quotient/quaternion
10noblacklist ${HOME}/.config/Quotient
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18include disable-shell.inc
19include disable-xdg.inc
20
21mkdir ${HOME}/.cache/Quotient/quaternion
22mkdir ${HOME}/.config/Quotient
23whitelist ${HOME}/.cache/Quotient/quaternion
24whitelist ${HOME}/.config/Quotient
25whitelist ${DOWNLOADS}
26whitelist /usr/share/Quotient/quaternion
27include whitelist-common.inc
28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc
30include whitelist-var-common.inc
31
32apparmor
33caps.drop all
34netfilter
35nodvd
36nogroups
37nonewprivs
38noroot
39notv
40nou2f
41protocol unix,inet,inet6,netlink
42seccomp
43shell none
44tracelog
45
46disable-mnt
47private-bin quaternion
48private-cache
49private-dev
50private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,mime.types,nsswitch.conf,pki,pulse,resolv.conf,selinux,ssl,X11,xdg
51private-tmp
52
53dbus-user none
54dbus-system none
diff --git a/etc/profile-m-z/spectral.profile b/etc/profile-m-z/spectral.profile
new file mode 100644
index 000000000..d7f94e144
--- /dev/null
+++ b/etc/profile-m-z/spectral.profile
@@ -0,0 +1,53 @@
1# Firejail profile for spectral
2# Description: Desktop client for Matrix
3# This file is overwritten after every install/update
4# Persistent local customizations
5include spectral.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.cache/ENCOM/Spectral
10noblacklist ${HOME}/.config/ENCOM
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18include disable-shell.inc
19include disable-xdg.inc
20
21mkdir ${HOME}/.cache/ENCOM/Spectral
22mkdir ${HOME}/.config/ENCOM
23whitelist ${HOME}/.cache/ENCOM/Spectral
24whitelist ${HOME}/.config/ENCOM
25whitelist ${DOWNLOADS}
26include whitelist-common.inc
27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc
30
31apparmor
32caps.drop all
33netfilter
34nodvd
35nogroups
36nonewprivs
37noroot
38notv
39nou2f
40protocol unix,inet,inet6,netlink
41seccomp
42shell none
43tracelog
44
45disable-mnt
46private-cache
47private-bin spectral
48private-dev
49private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,mime.types,nsswitch.conf,pki,pulse,resolv.conf,selinux,ssl,X11,xdg
50private-tmp
51
52dbus-user none
53dbus-system none
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index ce2c6995e..62b27aa06 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -229,6 +229,7 @@ font-manager
229fontforge 229fontforge
230fossamail 230fossamail
231four-in-a-row 231four-in-a-row
232fractal
232franz 233franz
233freecad 234freecad
234freecadcmd 235freecadcmd
@@ -464,6 +465,7 @@ mindless
464minecraft-launcher 465minecraft-launcher
465minetest 466minetest
466minitube 467minitube
468mirage
467mirrormagic 469mirrormagic
468mocp 470mocp
469mousepad 471mousepad
@@ -604,6 +606,7 @@ qt-faststart
604qtox 606qtox
605quadrapassel 607quadrapassel
606quassel 608quassel
609quaternion
607quiterss 610quiterss
608qupzilla 611qupzilla
609qutebrowser 612qutebrowser
@@ -656,6 +659,7 @@ soffice
656sol 659sol
657sound-juicer 660sound-juicer
658soundconverter 661soundconverter
662spectral
659spotify 663spotify
660sqlitebrowser 664sqlitebrowser
661ssh 665ssh
generated by cgit v1.2.3-54-g00ecf (git 2.45.1) at 2024-06-02 00:24:58 +0000