aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@protonmail.com>2021-03-05 10:51:10 -0500
committerLibravatar GitHub <noreply@github.com>2021-03-05 10:51:10 -0500
commit2e3d2f80ca8580572214725346da882385ea0914 (patch)
treebdcf6d93ed4f249795132346bd62e43289aacfb8
parentFix #4044 -- skypeforlinux fails to start… (diff)
parentUpdate etc/profile-m-z/nextcloud.profile (diff)
downloadfirejail-2e3d2f80ca8580572214725346da882385ea0914.tar.gz
firejail-2e3d2f80ca8580572214725346da882385ea0914.tar.zst
firejail-2e3d2f80ca8580572214725346da882385ea0914.zip
Merge pull request #3997 from nidamanx/patch-2
Create nextcloud-desktop.profile
Diffstat
-rw-r--r--etc/inc/disable-programs.inc3
-rw-r--r--etc/profile-m-z/nextcloud-desktop.profile10
-rw-r--r--etc/profile-m-z/nextcloud.profile71
-rw-r--r--src/firecfg/firecfg.config2
4 files changed, 86 insertions, 0 deletions
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc
index 05f82170d..729a25233 100644
--- a/etc/inc/disable-programs.inc
+++ b/etc/inc/disable-programs.inc
@@ -5,6 +5,7 @@ include disable-programs.local
5blacklist ${HOME}/Arduino 5blacklist ${HOME}/Arduino
6blacklist ${HOME}/i2p 6blacklist ${HOME}/i2p
7blacklist ${HOME}/Monero/wallets 7blacklist ${HOME}/Monero/wallets
8blacklist ${HOME}/Nextcloud
8blacklist ${HOME}/Nextcloud/Notes 9blacklist ${HOME}/Nextcloud/Notes
9blacklist ${HOME}/SoftMaker 10blacklist ${HOME}/SoftMaker
10blacklist ${HOME}/Standard Notes Backups 11blacklist ${HOME}/Standard Notes Backups
@@ -117,6 +118,7 @@ blacklist ${HOME}/.config/MusE
117blacklist ${HOME}/.config/MuseScore 118blacklist ${HOME}/.config/MuseScore
118blacklist ${HOME}/.config/MusicBrainz 119blacklist ${HOME}/.config/MusicBrainz
119blacklist ${HOME}/.config/Nathan Osman 120blacklist ${HOME}/.config/Nathan Osman
121blacklist ${HOME}/.config/Nextcloud
120blacklist ${HOME}/.config/Nylas Mail 122blacklist ${HOME}/.config/Nylas Mail
121blacklist ${HOME}/.config/PacmanLogViewer 123blacklist ${HOME}/.config/PacmanLogViewer
122blacklist ${HOME}/.config/PBE 124blacklist ${HOME}/.config/PBE
@@ -582,6 +584,7 @@ blacklist ${HOME}/.local/share/JetBrains
582blacklist ${HOME}/.local/share/Kingsoft 584blacklist ${HOME}/.local/share/Kingsoft
583blacklist ${HOME}/.local/share/Mendeley Ltd. 585blacklist ${HOME}/.local/share/Mendeley Ltd.
584blacklist ${HOME}/.local/share/Mumble 586blacklist ${HOME}/.local/share/Mumble
587blacklist ${HOME}/.local/share/Nextcloud
585blacklist ${HOME}/.local/share/PBE 588blacklist ${HOME}/.local/share/PBE
586blacklist ${HOME}/.local/share/Psi 589blacklist ${HOME}/.local/share/Psi
587blacklist ${HOME}/.local/share/QGIS 590blacklist ${HOME}/.local/share/QGIS
diff --git a/etc/profile-m-z/nextcloud-desktop.profile b/etc/profile-m-z/nextcloud-desktop.profile
new file mode 100644
index 000000000..e74f9c03f
--- /dev/null
+++ b/etc/profile-m-z/nextcloud-desktop.profile
@@ -0,0 +1,10 @@
1# Firejail profile alias for nextcloud
2# This file is overwritten after every install/update
3# Persistent local customizations
4include nextcloud-desktop.local
5# Persistent global definitions
6# added by included profile
7#include globals.local
8
9# Redirect
10include nextcloud.profile
diff --git a/etc/profile-m-z/nextcloud.profile b/etc/profile-m-z/nextcloud.profile
new file mode 100644
index 000000000..24768aee8
--- /dev/null
+++ b/etc/profile-m-z/nextcloud.profile
@@ -0,0 +1,71 @@
1# Firejail profile for nextcloud
2# Description: Nextcloud desktop synchronization client
3# This file is overwritten after every install/update
4# Persistent local customizations
5include nextcloud.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/Nextcloud
10noblacklist ${HOME}/.config/Nextcloud
11noblacklist ${HOME}/.local/share/Nextcloud
12# Uncomment or put in your nextcloud.local to allow sync with more directories.
13#noblacklist ${DOCUMENTS}
14#noblacklist ${MUSIC}
15#noblacklist ${PICTURES}
16#noblacklist ${VIDEOS}
17
18include disable-common.inc
19include disable-devel.inc
20include disable-exec.inc
21include disable-interpreters.inc
22include disable-passwdmgr.inc
23include disable-programs.inc
24include disable-shell.inc
25include disable-xdg.inc
26
27mkdir ${HOME}/Nextcloud
28mkdir ${HOME}/.config/Nextcloud
29mkdir ${HOME}/.local/share/Nextcloud
30whitelist ${HOME}/Nextcloud
31whitelist ${HOME}/.config/Nextcloud
32whitelist ${HOME}/.local/share/Nextcloud
33# Uncomment or put in your nextcloud.local to allow sync with more directories.
34#whitelist ${DOCUMENTS}
35#whitelist ${MUSIC}
36#whitelist ${PICTURES}
37#whitelist ${VIDEOS}
38include whitelist-common.inc
39include whitelist-runuser-common.inc
40include whitelist-usr-share-common.inc
41include whitelist-var-common.inc
42
43apparmor
44caps.drop all
45machine-id
46netfilter
47no3d
48nodvd
49nogroups
50nonewprivs
51noroot
52nosound
53notv
54nou2f
55novideo
56protocol unix,inet,inet6
57seccomp
58seccomp.block-secondary
59shell none
60tracelog
61
62disable-mnt
63private-bin nextcloud,nextcloud-desktop
64private-cache
65private-etc alternatives,ca-certificates,crypto-policies,drirc,fonts,gcrypt,host.conf,hosts,ld.so.cache,machine-id,Nextcloud,nsswitch.conf,os-release,passwd,pki,pulse,resolv.conf,selinux,ssl,xdg
66private-dev
67private-tmp
68
69dbus-user filter
70dbus-user.talk org.freedesktop.secrets
71dbus-system none
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index b44a1bc85..16cd59aa5 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -553,6 +553,8 @@ neverputt
553newsbeuter 553newsbeuter
554newsboat 554newsboat
555newsflash 555newsflash
556nextcloud
557nextcloud-desktop
556nheko 558nheko
557nicotine 559nicotine
558nitroshare 560nitroshare
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-09 17:50:20 +0000