diff options
author | Janik Rabe <janik-rabe@web.de> | 2016-02-17 22:07:00 +0200 |
---|---|---|
committer | Janik Rabe <janik-rabe@web.de> | 2016-02-17 22:07:00 +0200 |
commit | 0d44469d68fa22abb16d02135e48b6242689974a (patch) | |
tree | 7e2a25b8435a32636d868e388498f5cf3c846d20 | |
parent | cherrytree profile (diff) | |
download | firejail-0d44469d68fa22abb16d02135e48b6242689974a.tar.gz firejail-0d44469d68fa22abb16d02135e48b6242689974a.tar.zst firejail-0d44469d68fa22abb16d02135e48b6242689974a.zip |
Add Polari profile
-rw-r--r-- | Makefile.in | 1 | ||||
-rw-r--r-- | README | 4 | ||||
-rw-r--r-- | RELNOTES | 2 | ||||
-rw-r--r-- | etc/polari.profile | 18 | ||||
-rw-r--r-- | platform/debian/conffiles | 1 |
5 files changed, 23 insertions, 3 deletions
diff --git a/Makefile.in b/Makefile.in index 58667274c..ddc5f89a2 100644 --- a/Makefile.in +++ b/Makefile.in | |||
@@ -76,6 +76,7 @@ realinstall: | |||
76 | install -c -m 0644 .etc/audacious.profile $(DESTDIR)/$(sysconfdir)/firejail/. | 76 | install -c -m 0644 .etc/audacious.profile $(DESTDIR)/$(sysconfdir)/firejail/. |
77 | install -c -m 0644 .etc/clementine.profile $(DESTDIR)/$(sysconfdir)/firejail/. | 77 | install -c -m 0644 .etc/clementine.profile $(DESTDIR)/$(sysconfdir)/firejail/. |
78 | install -c -m 0644 .etc/epiphany.profile $(DESTDIR)/$(sysconfdir)/firejail/. | 78 | install -c -m 0644 .etc/epiphany.profile $(DESTDIR)/$(sysconfdir)/firejail/. |
79 | install -c -m 0644 .etc/polari.profile $(DESTDIR)/$(sysconfdir)/firejail/. | ||
79 | install -c -m 0644 .etc/gnome-mplayer.profile $(DESTDIR)/$(sysconfdir)/firejail/. | 80 | install -c -m 0644 .etc/gnome-mplayer.profile $(DESTDIR)/$(sysconfdir)/firejail/. |
80 | install -c -m 0644 .etc/rhythmbox.profile $(DESTDIR)/$(sysconfdir)/firejail/. | 81 | install -c -m 0644 .etc/rhythmbox.profile $(DESTDIR)/$(sysconfdir)/firejail/. |
81 | install -c -m 0644 .etc/totem.profile $(DESTDIR)/$(sysconfdir)/firejail/. | 82 | install -c -m 0644 .etc/totem.profile $(DESTDIR)/$(sysconfdir)/firejail/. |
@@ -21,7 +21,9 @@ netblue30 (netblue30@yahoo.com) | |||
21 | mahdi1234 (https://github.com/mahdi1234) | 21 | mahdi1234 (https://github.com/mahdi1234) |
22 | - cherrytree profile | 22 | - cherrytree profile |
23 | jrabe (https://github.com/jrabe) | 23 | jrabe (https://github.com/jrabe) |
24 | - disallow access to kdbx files | ||
24 | - Epiphany profile | 25 | - Epiphany profile |
26 | - Polari profile | ||
25 | jgriffiths (https://github.com/jgriffiths) | 27 | jgriffiths (https://github.com/jgriffiths) |
26 | - make rpm packages support | 28 | - make rpm packages support |
27 | Tom Mellor (https://github.com/kalegrill) | 29 | Tom Mellor (https://github.com/kalegrill) |
@@ -60,8 +62,6 @@ pirate486743186 (https://github.com/pirate486743186) | |||
60 | - KMail profile | 62 | - KMail profile |
61 | Kaan Genç (https://github.com/SeriousBug) | 63 | Kaan Genç (https://github.com/SeriousBug) |
62 | - dynamic allocation of noblacklist buffer | 64 | - dynamic allocation of noblacklist buffer |
63 | jrabe (https://github.com/jrabe) | ||
64 | - disallow access to kdbx files | ||
65 | Veeti Paananen (https://github.com/veeti) | 65 | Veeti Paananen (https://github.com/veeti) |
66 | - fixed Spotify profile | 66 | - fixed Spotify profile |
67 | Rahiel Kasim (https://github.com/rahiel) | 67 | Rahiel Kasim (https://github.com/rahiel) |
@@ -5,7 +5,7 @@ firejail (0.9.39) baseline; urgency=low | |||
5 | * added --nice option | 5 | * added --nice option |
6 | * --version also prints compile options | 6 | * --version also prints compile options |
7 | * build rpm packages using "make rpms" | 7 | * build rpm packages using "make rpms" |
8 | * new profiles: lxterminal, Epiphany, cherrytree | 8 | * new profiles: lxterminal, Epiphany, cherrytree, Polari |
9 | * bugfixes | 9 | * bugfixes |
10 | -- netblue30 <netblue30@yahoo.com> Tue, 8 Feb 2016 10:00:00 -0500 | 10 | -- netblue30 <netblue30@yahoo.com> Tue, 8 Feb 2016 10:00:00 -0500 |
11 | 11 | ||
diff --git a/etc/polari.profile b/etc/polari.profile new file mode 100644 index 000000000..be28ad628 --- /dev/null +++ b/etc/polari.profile | |||
@@ -0,0 +1,18 @@ | |||
1 | # Polari IRC profile | ||
2 | include /etc/firejail/disable-mgmt.inc | ||
3 | include /etc/firejail/disable-secret.inc | ||
4 | include /etc/firejail/disable-common.inc | ||
5 | include /etc/firejail/disable-devel.inc | ||
6 | include /etc/firejail/disable-terminals.inc | ||
7 | whitelist ${HOME}/.local/share/Empathy | ||
8 | whitelist ${HOME}/.local/share/telepathy | ||
9 | whitelist ${HOME}/.local/share/TpLogger | ||
10 | whitelist ${HOME}/.config/dconf | ||
11 | whitelist ${HOME}/.config/telepathy-account-widgets | ||
12 | whitelist ${HOME}/.cache/telepathy | ||
13 | whitelist ${HOME}/.purple | ||
14 | include /etc/firejail/whitelist-common.inc | ||
15 | caps.drop all | ||
16 | seccomp | ||
17 | protocol unix,inet,inet6 | ||
18 | noroot | ||
diff --git a/platform/debian/conffiles b/platform/debian/conffiles index 21578f57d..d4c60a339 100644 --- a/platform/debian/conffiles +++ b/platform/debian/conffiles | |||
@@ -22,6 +22,7 @@ | |||
22 | /etc/firejail/audacious.profile | 22 | /etc/firejail/audacious.profile |
23 | /etc/firejail/clementine.profile | 23 | /etc/firejail/clementine.profile |
24 | /etc/firejail/epiphany.profile | 24 | /etc/firejail/epiphany.profile |
25 | /etc/firejail/polari.profile | ||
25 | /etc/firejail/gnome-mplayer.profile | 26 | /etc/firejail/gnome-mplayer.profile |
26 | /etc/firejail/rhythmbox.profile | 27 | /etc/firejail/rhythmbox.profile |
27 | /etc/firejail/totem.profile | 28 | /etc/firejail/totem.profile |