Merge pull request #540 from Fred-Barclay/brave

Brave

10 files changed, 28 insertions, 3 deletions

diff --git a/Makefile.in b/Makefile.in
index edcf09225..6699ab732 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -187,6 +187,7 @@ realinstall:
         install -c -m 0644 .etc/corebird.profile $(DESTDIR)/$(sysconfdir)/firejail/.
         install -c -m 0644 .etc/konversation.profile $(DESTDIR)/$(sysconfdir)/firejail/.
         install -c -m 0644 .etc/psi-plus.profile $(DESTDIR)/$(sysconfdir)/firejail/.
+        install -c -m 0644 .etc/brave.profile $(DESTDIR)/$(sysconfdir)/firejail/.
         sh -c "if [ ! -f $(DESTDIR)/$(sysconfdir)/firejail/login.users ]; then install -c -m 0644 etc/login.users $(DESTDIR)/$(sysconfdir)/firejail/.; fi;"
         sh -c "if [ ! -f $(DESTDIR)/$(sysconfdir)/firejail/firejail.config ]; then install -c -m 0644 etc/firejail.config $(DESTDIR)/$(sysconfdir)/firejail/.; fi;"
         rm -fr .etc
diff --git a/README b/README
index 390fbb84f..07f49c7d1 100644
--- a/README
+++ b/README
@@ -77,6 +77,8 @@ Fred-Barclay (https://github.com/Fred-Barclay)
         - blacklisted escape-happy terminals in disable-common.inc
         - blacklisted g++
         - added xplayer, xreader, and xviewer profiles
+        - added Brave profile
+        - added "shutdown" filter for x86_64 arch to seccomp
 Petter Reinholdtsen (pere@hungry.com)
         - Opera profile patch
 n1trux (https://github.com/n1trux)
diff --git a/README.md b/README.md
index 2d5f472ea..b08be89c9 100644
--- a/README.md
+++ b/README.md
@@ -290,6 +290,4 @@ $ man firejail-profile
 lxterminal, Epiphany, cherrytree, Polari, Vivaldi, Atril, qutebrowser, SlimJet, Battle for Wesnoth, Hedgewars, qTox,
 OpenSSH client, OpenBox window manager, Dillo, cmus, dnsmasq, PaleMoon, Icedove, abrowser, 0ad, netsurf,
 Warzone2100, okular, gwenview, Gpredict, Aweather, Stellarium, Google-Play-Music-Desktop-Player, quiterss,
-cyberfox, generic Ubuntu snap application profile, xplayer, xreader, xviewer, mcabber, Psi+, Corebird, Konversation
-
-
+cyberfox, generic Ubuntu snap application profile, xplayer, xreader, xviewer, mcabber, Psi+, Corebird, Konversation, Brave
diff --git a/RELNOTES b/RELNOTES
index b791048e7..c9201cf38 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -25,6 +25,7 @@ firejail (0.9.40) baseline; urgency=low
   * new profiles: Aweather, Stellarium, gpredict, quiterss, cyberfox
   * new profiles: generic Ubuntu snap application profile, xplayer
   * new profiles: xreader, xviewer, mcabber, Psi+, Corebird, Konversation
+  * new profiles: Brave
   * generic.profile renamed default.profile
   * build rpm packages using "make rpms"
   * bugfixes
diff --git a/etc/atril.profile b/etc/atril.profile
index c20a8c7b3..b55f99cdd 100644
--- a/etc/atril.profile
+++ b/etc/atril.profile
@@ -13,3 +13,4 @@ nonewprivs
 noroot
 tracelog
 netfilter
+nosound
diff --git a/etc/brave.profile b/etc/brave.profile
new file mode 100644
index 000000000..24a0a31c9
--- /dev/null
+++ b/etc/brave.profile
@@ -0,0 +1,18 @@
+# Profile for Brave browser
+
+noblacklist ~/.config/brave
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+
+caps.drop all
+seccomp
+protocol unix,inet,inet6,netlink
+netfilter
+noroot
+
+whitelist ${DOWNLOADS}
+
+mkdir ~/.config
+mkdir ~/.config/brave
+whitelist ~/.config/brave
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 3474a6592..633f9c548 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -51,6 +51,7 @@ blacklist ${HOME}/.config/epiphany
 blacklist ${HOME}/.config/slimjet
 blacklist ${HOME}/.config/qutebrowser
 blacklist ${HOME}/.8pecxstudios
+blacklist ${HOME}/.config/brave
 
 # Instant Messaging
 blacklist ${HOME}/.config/hexchat
diff --git a/etc/xreader.profile b/etc/xreader.profile
index 4b7ed41be..267330c1f 100644
--- a/etc/xreader.profile
+++ b/etc/xreader.profile
@@ -15,3 +15,4 @@ nonewprivs
 noroot
 tracelog
 netfilter
+nosound
diff --git a/platform/debian/conffiles b/platform/debian/conffiles
index eff859cc5..7da95eb68 100644
--- a/platform/debian/conffiles
+++ b/platform/debian/conffiles
@@ -101,3 +101,4 @@
 /etc/firejail/corebird.profile
 /etc/firejail/konversation.profile
 /etc/firejail/psi-plus.profile
+/etc/firejail/brave.profile
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index d019c3a5c..567f97c69 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -35,6 +35,7 @@ vivaldi-beta
 vivaldi
 dillo
 netsurf
+brave
 
 # bittorrent/ftp
 deluge