diff options
author | 2017-07-30 17:26:38 -0400 | |
---|---|---|
committer | 2017-08-02 00:13:42 -0400 | |
commit | 0e7b0bd52e7bc26d7407a5f6f756b474e52dbaf1 (patch) | |
tree | 7f498480f8f784fc926d593b2a972370223d8772 | |
parent | Initial adding of memory-deny-write-execute to profiles (diff) | |
download | firejail-0e7b0bd52e7bc26d7407a5f6f756b474e52dbaf1.tar.gz firejail-0e7b0bd52e7bc26d7407a5f6f756b474e52dbaf1.tar.zst firejail-0e7b0bd52e7bc26d7407a5f6f756b474e52dbaf1.zip |
Add noexec to more profiles as tested by @curiosity-seeker
See https://github.com/netblue30/firejail/pull/1367#issuecomment-315793729
-rw-r--r-- | etc/digikam.profile | 3 | ||||
-rw-r--r-- | etc/dragon.profile | 3 | ||||
-rw-r--r-- | etc/google-chrome-beta.profile | 3 | ||||
-rw-r--r-- | etc/google-chrome-unstable.profile | 3 | ||||
-rw-r--r-- | etc/google-chrome.profile | 3 | ||||
-rw-r--r-- | etc/guayadeque.profile | 3 | ||||
-rw-r--r-- | etc/gwenview.profile | 3 | ||||
-rw-r--r-- | etc/icecat.profile | 3 | ||||
-rw-r--r-- | etc/okular.profile | 3 | ||||
-rw-r--r-- | etc/quiterss.profile | 3 | ||||
-rw-r--r-- | etc/vivaldi.profile | 3 |
11 files changed, 33 insertions, 0 deletions
diff --git a/etc/digikam.profile b/etc/digikam.profile index fd19953a0..d81d00ed3 100644 --- a/etc/digikam.profile +++ b/etc/digikam.profile | |||
@@ -31,3 +31,6 @@ shell none | |||
31 | # private-etc none | 31 | # private-etc none |
32 | # private-dev - prevents libdc1394 loading; this lib is used to connect to a camera device | 32 | # private-dev - prevents libdc1394 loading; this lib is used to connect to a camera device |
33 | private-tmp | 33 | private-tmp |
34 | |||
35 | noexec ${HOME} | ||
36 | noexec /tmp | ||
diff --git a/etc/dragon.profile b/etc/dragon.profile index d099f1d9d..47d2c593a 100644 --- a/etc/dragon.profile +++ b/etc/dragon.profile | |||
@@ -27,3 +27,6 @@ private-bin dragon | |||
27 | private-dev | 27 | private-dev |
28 | private-tmp | 28 | private-tmp |
29 | # private-etc | 29 | # private-etc |
30 | |||
31 | noexec ${HOME} | ||
32 | noexec /tmp | ||
diff --git a/etc/google-chrome-beta.profile b/etc/google-chrome-beta.profile index 3b884bd64..e527318c2 100644 --- a/etc/google-chrome-beta.profile +++ b/etc/google-chrome-beta.profile | |||
@@ -26,3 +26,6 @@ whitelist ~/.cache/google-chrome-beta | |||
26 | mkdir ~/.pki | 26 | mkdir ~/.pki |
27 | whitelist ~/.pki | 27 | whitelist ~/.pki |
28 | include /etc/firejail/whitelist-common.inc | 28 | include /etc/firejail/whitelist-common.inc |
29 | |||
30 | noexec ${HOME} | ||
31 | noexec /tmp | ||
diff --git a/etc/google-chrome-unstable.profile b/etc/google-chrome-unstable.profile index 18bcb94a6..860e2488a 100644 --- a/etc/google-chrome-unstable.profile +++ b/etc/google-chrome-unstable.profile | |||
@@ -26,3 +26,6 @@ whitelist ~/.cache/google-chrome-unstable | |||
26 | mkdir ~/.pki | 26 | mkdir ~/.pki |
27 | whitelist ~/.pki | 27 | whitelist ~/.pki |
28 | include /etc/firejail/whitelist-common.inc | 28 | include /etc/firejail/whitelist-common.inc |
29 | |||
30 | noexec ${HOME} | ||
31 | noexec /tmp | ||
diff --git a/etc/google-chrome.profile b/etc/google-chrome.profile index 84e0c6cdc..7d27355d2 100644 --- a/etc/google-chrome.profile +++ b/etc/google-chrome.profile | |||
@@ -27,3 +27,6 @@ whitelist ~/.cache/google-chrome | |||
27 | mkdir ~/.pki | 27 | mkdir ~/.pki |
28 | whitelist ~/.pki | 28 | whitelist ~/.pki |
29 | include /etc/firejail/whitelist-common.inc | 29 | include /etc/firejail/whitelist-common.inc |
30 | |||
31 | noexec ${HOME} | ||
32 | noexec /tmp | ||
diff --git a/etc/guayadeque.profile b/etc/guayadeque.profile index 5b3bc11f2..86f3d7838 100644 --- a/etc/guayadeque.profile +++ b/etc/guayadeque.profile | |||
@@ -24,3 +24,6 @@ shell none | |||
24 | private-bin guayadeque | 24 | private-bin guayadeque |
25 | private-dev | 25 | private-dev |
26 | private-tmp | 26 | private-tmp |
27 | |||
28 | noexec ${HOME} | ||
29 | noexec /tmp | ||
diff --git a/etc/gwenview.profile b/etc/gwenview.profile index 97227186a..047d2e32e 100644 --- a/etc/gwenview.profile +++ b/etc/gwenview.profile | |||
@@ -32,3 +32,6 @@ private-dev | |||
32 | 32 | ||
33 | # Experimental: | 33 | # Experimental: |
34 | #private-etc X11 | 34 | #private-etc X11 |
35 | |||
36 | noexec ${HOME} | ||
37 | noexec /tmp | ||
diff --git a/etc/icecat.profile b/etc/icecat.profile index 7684cedbe..600263a2a 100644 --- a/etc/icecat.profile +++ b/etc/icecat.profile | |||
@@ -48,3 +48,6 @@ include /etc/firejail/whitelist-common.inc | |||
48 | 48 | ||
49 | # experimental features | 49 | # experimental features |
50 | #private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse | 50 | #private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse |
51 | |||
52 | noexec ${HOME} | ||
53 | noexec /tmp | ||
diff --git a/etc/okular.profile b/etc/okular.profile index 351083582..0944e900c 100644 --- a/etc/okular.profile +++ b/etc/okular.profile | |||
@@ -34,3 +34,6 @@ tracelog | |||
34 | # private-etc fonts,X11 | 34 | # private-etc fonts,X11 |
35 | private-dev | 35 | private-dev |
36 | private-tmp | 36 | private-tmp |
37 | |||
38 | noexec ${HOME} | ||
39 | noexec /tmp | ||
diff --git a/etc/quiterss.profile b/etc/quiterss.profile index c8112f064..aa17693cd 100644 --- a/etc/quiterss.profile +++ b/etc/quiterss.profile | |||
@@ -42,3 +42,6 @@ private-dev | |||
42 | disable-mnt | 42 | disable-mnt |
43 | 43 | ||
44 | include /etc/firejail/whitelist-common.inc | 44 | include /etc/firejail/whitelist-common.inc |
45 | |||
46 | noexec ${HOME} | ||
47 | noexec /tmp | ||
diff --git a/etc/vivaldi.profile b/etc/vivaldi.profile index 25d78439d..7b9c4c9c6 100644 --- a/etc/vivaldi.profile +++ b/etc/vivaldi.profile | |||
@@ -22,3 +22,6 @@ whitelist ~/.config/vivaldi | |||
22 | mkdir ~/.cache/vivaldi | 22 | mkdir ~/.cache/vivaldi |
23 | whitelist ~/.cache/vivaldi | 23 | whitelist ~/.cache/vivaldi |
24 | include /etc/firejail/whitelist-common.inc | 24 | include /etc/firejail/whitelist-common.inc |
25 | |||
26 | noexec ${HOME} | ||
27 | noexec /tmp | ||