diff options
author | 2021-05-20 18:34:24 +0000 | |
---|---|---|
committer | 2021-05-20 18:34:24 +0000 | |
commit | 395fca8a670aa87e057c2f66c812b58579493fe2 (patch) | |
tree | 36dc859b5e6473a07763e749e5d6a34a823602b9 | |
parent | new profiles (diff) | |
download | firejail-395fca8a670aa87e057c2f66c812b58579493fe2.tar.gz firejail-395fca8a670aa87e057c2f66c812b58579493fe2.tar.zst firejail-395fca8a670aa87e057c2f66c812b58579493fe2.zip |
* fix blobby
* fix funnyboat
* fix librecad
* drop doubled netfilter entree in blobby
* drop unneeded include in funnyboat
-rw-r--r-- | etc/profile-a-l/blobby.profile | 10 | ||||
-rw-r--r-- | etc/profile-a-l/funnyboat.profile | 10 | ||||
-rw-r--r-- | etc/profile-a-l/librecad.profile | 9 |
3 files changed, 15 insertions, 14 deletions
diff --git a/etc/profile-a-l/blobby.profile b/etc/profile-a-l/blobby.profile index 9bb097b7e..229c20293 100644 --- a/etc/profile-a-l/blobby.profile +++ b/etc/profile-a-l/blobby.profile | |||
@@ -34,19 +34,19 @@ noroot | |||
34 | notv | 34 | notv |
35 | nou2f | 35 | nou2f |
36 | novideo | 36 | novideo |
37 | protocol unix,inet,netlink, | 37 | protocol unix,inet,inet6,netlink |
38 | netfilter | ||
39 | seccomp | 38 | seccomp |
40 | shell none | 39 | shell none |
41 | tracelog | 40 | tracelog |
42 | 41 | ||
43 | disable-mnt | 42 | disable-mnt |
44 | private-bin blobby, | 43 | private-bin blobby |
45 | private-lib | ||
46 | private-dev | 44 | private-dev |
47 | private-etc hosts,group,asound.conf,alsa,machine-id,pulse,drirc,login.defs,passwd, | 45 | private-etc alsa,alternatives,asound.conf,drirc,group,hosts,login.defs,machine-id,passwd,pulse |
46 | private-lib | ||
48 | private-tmp | 47 | private-tmp |
49 | 48 | ||
50 | dbus-user none | 49 | dbus-user none |
51 | dbus-system none | 50 | dbus-system none |
51 | |||
52 | memory-deny-write-execute | 52 | memory-deny-write-execute |
diff --git a/etc/profile-a-l/funnyboat.profile b/etc/profile-a-l/funnyboat.profile index e4d9b018e..8852925b1 100644 --- a/etc/profile-a-l/funnyboat.profile +++ b/etc/profile-a-l/funnyboat.profile | |||
@@ -1,4 +1,4 @@ | |||
1 | # Firejail profile for default | 1 | # Firejail profile for funnyboat |
2 | # This file is overwritten after every install/update | 2 | # This file is overwritten after every install/update |
3 | # Persistent local customizations | 3 | # Persistent local customizations |
4 | include funnyboat.local | 4 | include funnyboat.local |
@@ -7,17 +7,17 @@ include globals.local | |||
7 | 7 | ||
8 | noblacklist ${HOME}/.funnyboat | 8 | noblacklist ${HOME}/.funnyboat |
9 | 9 | ||
10 | include disable-common.inc | ||
11 | include disable-devel.inc | ||
12 | ignore noexec /dev/shm | 10 | ignore noexec /dev/shm |
13 | include disable-exec.inc | ||
14 | include allow-python2.inc | 11 | include allow-python2.inc |
15 | include allow-python3.inc | 12 | include allow-python3.inc |
13 | |||
14 | include disable-common.inc | ||
15 | include disable-devel.inc | ||
16 | include disable-exec.inc | ||
16 | include disable-interpreters.inc | 17 | include disable-interpreters.inc |
17 | include disable-passwdmgr.inc | 18 | include disable-passwdmgr.inc |
18 | include disable-programs.inc | 19 | include disable-programs.inc |
19 | # include disable-shell.inc | 20 | # include disable-shell.inc |
20 | include disable-write-mnt.inc | ||
21 | include disable-xdg.inc | 21 | include disable-xdg.inc |
22 | 22 | ||
23 | mkdir ${HOME}/.funnyboat | 23 | mkdir ${HOME}/.funnyboat |
diff --git a/etc/profile-a-l/librecad.profile b/etc/profile-a-l/librecad.profile index 431caf914..c57eae73d 100644 --- a/etc/profile-a-l/librecad.profile +++ b/etc/profile-a-l/librecad.profile | |||
@@ -32,19 +32,20 @@ noroot | |||
32 | notv | 32 | notv |
33 | #nou2f | 33 | #nou2f |
34 | novideo | 34 | novideo |
35 | protocol unix,inet,inet6, | 35 | protocol unix,inet,inet6 |
36 | netfilter | 36 | netfilter |
37 | seccomp | 37 | seccomp |
38 | shell none | 38 | shell none |
39 | #tracelog | 39 | #tracelog |
40 | 40 | ||
41 | #disable-mnt | 41 | #disable-mnt |
42 | private-bin librecad, | 42 | private-bin librecad |
43 | #private-lib | ||
44 | private-dev | 43 | private-dev |
45 | # private-etc cups,drirc,fonts,xdg,passwd, | 44 | # private-etc cups,drirc,fonts,passwd,xdg |
45 | #private-lib | ||
46 | private-tmp | 46 | private-tmp |
47 | 47 | ||
48 | dbus-user none | 48 | dbus-user none |
49 | dbus-system none | 49 | dbus-system none |
50 | |||
50 | memory-deny-write-execute | 51 | memory-deny-write-execute |