aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2017-04-24 20:39:23 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2017-04-24 20:39:23 -0400
commitbc257b6a4cdd0d335d744a0e70d06cef0c81ea26 (patch)
tree777f5c8558eba98704003f9d0ee7db833cc6a9da
parentfcopy - no checking for group in order to fix files such as /usr/bin/mutt_do... (diff)
downloadfirejail-bc257b6a4cdd0d335d744a0e70d06cef0c81ea26.tar.gz
firejail-bc257b6a4cdd0d335d744a0e70d06cef0c81ea26.tar.zst
firejail-bc257b6a4cdd0d335d744a0e70d06cef0c81ea26.zip
added akregator, kcalc and ktorrent profiles
Diffstat
-rw-r--r--README.md2
-rw-r--r--etc/akregator.profile30
-rw-r--r--etc/disable-programs.inc4
-rw-r--r--etc/kcalc.profile29
-rw-r--r--etc/ktorrent.profile30
-rw-r--r--platform/debian/conffiles3
-rw-r--r--src/firecfg/firecfg.config356
7 files changed, 264 insertions, 190 deletions
diff --git a/README.md b/README.md
index 5a0be0a7b..06f7c1c6f 100644
--- a/README.md
+++ b/README.md
@@ -196,4 +196,4 @@ simple-scan, skanlite, ssh-agent, tracker, transmission-cli, transmission-show,
196xed, pluma, Cryptocat, Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5, 196xed, pluma, Cryptocat, Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5,
197PDFSam, Pithos, Xonotic, wireshark, keepassx2, QupZilla, FossaMail, Uzbl browser, xmms, iridium browser, 197PDFSam, Pithos, Xonotic, wireshark, keepassx2, QupZilla, FossaMail, Uzbl browser, xmms, iridium browser,
198Kino, Thunar, Geeqie, Engrampa, Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView, baloo_file, 198Kino, Thunar, Geeqie, Engrampa, Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView, baloo_file,
199Nylas, dino, BibleTime, viewnior, Kodi, viking, youtube-dl, meld, Arduino 199Nylas, dino, BibleTime, viewnior, Kodi, viking, youtube-dl, meld, Arduino, akregator, kcalc, ktorrent
diff --git a/etc/akregator.profile b/etc/akregator.profile
new file mode 100644
index 000000000..c99153450
--- /dev/null
+++ b/etc/akregator.profile
@@ -0,0 +1,30 @@
1# This file is overwritten during software install.
2# Persistent customizations should go in a .local file.
3include /etc/firejail/akregator.local
4
5################################
6# Generic GUI application profile
7################################
8noblacklist ${HOME}/.config/akregatorrc
9noblacklist ${HOME}/.local/share/akregator
10include /etc/firejail/disable-common.inc
11include /etc/firejail/disable-programs.inc
12include /etc/firejail/disable-passwdmgr.inc
13
14caps.drop all
15netfilter
16nonewprivs
17noroot
18protocol unix,inet,inet6
19seccomp
20
21#
22# depending on you usage, you can enable some of the commands below:
23#
24# nogroups
25# shell none
26# private-bin program
27# private-etc none
28# private-dev
29# private-tmp
30
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 32adac298..fbe614b0d 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -21,6 +21,7 @@ blacklist ${HOME}/.bcast5
21blacklist ${HOME}/.bibletime 21blacklist ${HOME}/.bibletime
22blacklist ${HOME}/.claws-mail 22blacklist ${HOME}/.claws-mail
23blacklist ${HOME}/.config/0ad 23blacklist ${HOME}/.config/0ad
24blacklist ${HOME}/.config/akregatorrc
24blacklist ${HOME}/.config/Atom 25blacklist ${HOME}/.config/Atom
25blacklist ${HOME}/.config/Audaciousrc 26blacklist ${HOME}/.config/Audaciousrc
26blacklist ${HOME}/.config/Brackets 27blacklist ${HOME}/.config/Brackets
@@ -179,6 +180,7 @@ blacklist ${HOME}/.kde4/share/config/konqsidebartngrc
179blacklist ${HOME}/.kde4/share/config/konquerorrc 180blacklist ${HOME}/.kde4/share/config/konquerorrc
180blacklist ${HOME}/.kde4/share/config/okularpartrc 181blacklist ${HOME}/.kde4/share/config/okularpartrc
181blacklist ${HOME}/.kde4/share/config/okularrc 182blacklist ${HOME}/.kde4/share/config/okularrc
183blacklist ${HOME}/.kde4/share/config/ktorrentrc
182blacklist ${HOME}/.kde/share/apps/gwenview 184blacklist ${HOME}/.kde/share/apps/gwenview
183blacklist ${HOME}/.kde/share/apps/kcookiejar 185blacklist ${HOME}/.kde/share/apps/kcookiejar
184blacklist ${HOME}/.kde/share/apps/khtml 186blacklist ${HOME}/.kde/share/apps/khtml
@@ -196,6 +198,7 @@ blacklist ${HOME}/.kde/share/config/konqsidebartngrc
196blacklist ${HOME}/.kde/share/config/konquerorrc 198blacklist ${HOME}/.kde/share/config/konquerorrc
197blacklist ${HOME}/.kde/share/config/okularpartrc 199blacklist ${HOME}/.kde/share/config/okularpartrc
198blacklist ${HOME}/.kde/share/config/okularrc 200blacklist ${HOME}/.kde/share/config/okularrc
201blacklist ${HOME}/.kde/share/config/ktorrentrc
199blacklist ${HOME}/.killingfloor 202blacklist ${HOME}/.killingfloor
200blacklist ${HOME}/.kino-history 203blacklist ${HOME}/.kino-history
201blacklist ${HOME}/.kinorc 204blacklist ${HOME}/.kinorc
@@ -207,6 +210,7 @@ blacklist ${HOME}/.local/.share/maps-places.json
207blacklist ${HOME}/.local/lib/python2.7/site-packages 210blacklist ${HOME}/.local/lib/python2.7/site-packages
208blacklist ${HOME}/.local/share/0ad 211blacklist ${HOME}/.local/share/0ad
209blacklist ${HOME}/.local/share/3909/PapersPlease 212blacklist ${HOME}/.local/share/3909/PapersPlease
213blacklist ${HOME}/.local/share/akregator
210blacklist ${HOME}/.local/share/Empathy 214blacklist ${HOME}/.local/share/Empathy
211blacklist ${HOME}/.local/share/Mumble 215blacklist ${HOME}/.local/share/Mumble
212blacklist ${HOME}/.local/share/QuiteRss 216blacklist ${HOME}/.local/share/QuiteRss
diff --git a/etc/kcalc.profile b/etc/kcalc.profile
new file mode 100644
index 000000000..88f84fdf6
--- /dev/null
+++ b/etc/kcalc.profile
@@ -0,0 +1,29 @@
1# This file is overwritten during software install.
2# Persistent customizations should go in a .local file.
3include /etc/firejail/kcalc.local
4
5################################
6# Generic GUI application profile
7################################
8include /etc/firejail/disable-common.inc
9include /etc/firejail/disable-programs.inc
10include /etc/firejail/disable-passwdmgr.inc
11
12caps.drop all
13netfilter
14nonewprivs
15noroot
16protocol unix,inet,inet6
17seccomp
18
19#
20# depending on you usage, you can enable some of the commands below:
21#
22private
23nogroups
24shell none
25# private-bin program
26# private-etc none
27private-dev
28private-tmp
29
diff --git a/etc/ktorrent.profile b/etc/ktorrent.profile
new file mode 100644
index 000000000..f1a5d995d
--- /dev/null
+++ b/etc/ktorrent.profile
@@ -0,0 +1,30 @@
1# This file is overwritten during software install.
2# Persistent customizations should go in a .local file.
3include /etc/firejail/ktorrent.local
4
5################################
6# Generic GUI application profile
7################################
8blacklist ${HOME}/.kde/share/config/ktorrentrc
9blacklist ${HOME}/.kde4/share/config/ktorrentrc
10include /etc/firejail/disable-common.inc
11include /etc/firejail/disable-programs.inc
12include /etc/firejail/disable-passwdmgr.inc
13
14caps.drop all
15netfilter
16nonewprivs
17noroot
18protocol unix,inet,inet6
19seccomp
20
21#
22# depending on you usage, you can enable some of the commands below:
23#
24nogroups
25shell none
26# private-bin program
27# private-etc none
28private-dev
29# private-tmp
30
diff --git a/platform/debian/conffiles b/platform/debian/conffiles
index 011f52657..4169184df 100644
--- a/platform/debian/conffiles
+++ b/platform/debian/conffiles
@@ -268,3 +268,6 @@
268/etc/firejail/engrampa.profile 268/etc/firejail/engrampa.profile
269/etc/firejail/scribus.profile 269/etc/firejail/scribus.profile
270/etc/firejail/mediathekview.profile 270/etc/firejail/mediathekview.profile
271/etc/firejail/akregator.profile
272/etc/firejail/kcalc.profile
273/etc/firejail/ktorrent.profile
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 21c9ceec1..2569c36ef 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -1,245 +1,223 @@
1# /usr/lib/firejail/firecfg.config - firecfg utility configuration file 1# /usr/lib/firejail/firecfg.config - firecfg utility configuration file
2# This is the list of programs handled by firecfg utility 2# This is the list of programs in alfabetical order handled by firecfg utility
3# 3#
4
5# astronomy
6gpredict
7stellarium
8
9# bittorrent/ftp
10deluge
11dropbox
12filezilla
13qbittorrent
14rtorrent
15transmission-gtk
16transmission-qt
17transmission-cli
18transmission-show
19uget-gtk
20youtube-dl
21
22# browsers/email
23abrowser
24brave
25chromium
26chromium-browser
27claws-mail
28conkeror
29cyberfox
30firefox
31firefox-esr
32flashpeak-slimjet
33epiphany
34dillo
35google-chrome
36google-chrome-beta
37google-chrome-stable
38google-chrome-unstable
39iceweasel
40icecat
41icedove
42inox
43iridium
44iridium-browser
45kmail
46midori
47mutt
48netsurf
49nylas
50opera-beta
51opera
52palemoon
53qutebrowser
54start-tor-browser
55seamonkey
56seamonkey-bin
57thunderbird
58vivaldi
59vivaldi-beta
60vivaldi-stable
61evolution
62elinks
63lynx
64w3m
65
66# chat/messaging
67bitlbee
68corebird
69# Cryptocat is added but commented since isn't installed to a */bin... keep an eye on this
70dino
71empathy
72gajim
73gitter
74hexchat
75jitsi
76konversation
77mumble
78pidgin
79polari
80psi-plus
81qtox
82quassel
83skype
84skypeforlinux
85slack
86telegram
87weechat
88weechat-curses
89wire
90xchat
91
92# dns
93dnscrypt-proxy
94dnsmasq
95unbound
96
97# emulators/compatibility layers
98mupen64plus
99wine
100dosbox
101virtualbox
102qemu-launcher
103#qemu-system-x86_64
104
105# games
1060ad 40ad
107gnome-2048 5abrowser
108gnome-chess 6akregator
109hedgewars
110multimc5
111steam
112wesnot
113warzone2100
114xonotic-glx
115xonotic-sdl
116
117# Media
118amarok 7amarok
8arduino
9ark
10atom
11atom-beta
12atool
13atril
119audacious 14audacious
120audacity 15audacity
16aweather
17baloo_file
18bibletime
19bitlbee
121bleachbit 20bleachbit
21bless
122brasero 22brasero
23brave
24cherrytree
25chromium
26chromium-browser
27claws-mail
123clementine 28clementine
124cmus 29cmus
30conkeror
31corebird
32# Cryptocat is added but commented since isn't installed to a */bin... keep an eye on this
125cvlc 33cvlc
34cyberfox
126deadbeef 35deadbeef
36deluge
37dillo
38dino
127display 39display
40dnscrypt-proxy
41dnsmasq
128dolphin 42dolphin
43dosbox
129dragon 44dragon
45dropbox
46elinks
47empathy
48eog
49eom
50epiphany
51evince
52evolution
130exiftool 53exiftool
54fbreader
131feh 55feh
56file-roller
57filezilla
58firefox
59firefox-esr
60flashpeak-slimjet
61flowblade
62gajim
63gedit
132geeqie 64geeqie
65gimp
66gitter
133gjs 67gjs
68gnome-2048
134gnome-books 69gnome-books
70gnome-calculator
71gnome-chess
135gnome-clocks 72gnome-clocks
136gnome-photos
137gnome-documents 73gnome-documents
138gnome-maps 74gnome-maps
139gnome-mplayer 75gnome-mplayer
140gnome-music 76gnome-music
77gnome-photos
78gnome-weather
141goobox 79goobox
80google-chrome
81google-chrome-beta
82google-chrome-stable
83google-chrome-unstable
142google-play-music-desktop-player 84google-play-music-desktop-player
143gpicview 85gpicview
144img2txt 86gpredict
145k3b
146kodi
147lollypop
148mediainfo
149mediathekview
150mpv
151nautilus
152parole
153pithos
154rhythmbox
155simple-scan
156skanlite
157spotify
158totem
159viewnior
160vlc
161xfburn
162xmms
163xplayer
164xviewer
165eom
166
167# news readers
168quiterss
169
170# office
171atril
172cherrytree
173evince
174fbreader
175gedit
176gimp
177gthumb 87gthumb
178gwenview 88gwenview
89hedgewars
90hexchat
179highlight 91highlight
92icecat
93icedove
94iceweasel
95img2txt
180inkscape 96inkscape
97inox
98iridium
99iridium-browser
100jd-gui
101jitsi
102k3b
181kate 103kate
104kcalc
105keepass
106keepass2
107keepassx
108keepassx2
109keepassxc
110kmail
111kodi
112konversation
113ktorrent
182libreoffice 114libreoffice
183localc 115localc
184lodraw 116lodraw
185loffice 117loffice
186lofromtemplate 118lofromtemplate
187loimpress 119loimpress
120lollypop
188lomath 121lomath
189loweb 122loweb
190lowriter 123lowriter
191luminance-hdr 124luminance-hdr
192mupdf 125lynx
193pdfsam
194qpdfview
195scribus
196soffice
197synfigstudio
198Mathematica
199mathematica 126mathematica
127Mathematica
128mediainfo
129mediathekview
130meld
131midori
132mousepad
133mpv
134multimc5
135mumble
136mupdf
137mupen64plus
138mutt
139nautilus
140netsurf
141nylas
200odt2txt 142odt2txt
201okular 143okular
144openshot
145opera
146opera-beta
147palemoon
148parole
149pdfsam
202pdftotext 150pdftotext
151pidgin
152pithos
203pix 153pix
204xpdf
205xreader
206zathura
207openshot
208flowblade
209eog
210
211# other
212arduino
213atom
214atom-beta
215baloo_file
216bless
217bibletime
218gnome-calculator
219jd-gui
220keepass
221keepass2
222keepassx
223keepassx2
224keepassxc
225meld
226mousepad
227pluma 154pluma
155polari
156psi-plus
157qbittorrent
158qemu-launcher
159#qemu-system-x86_64
160qpdfview
161qtox
162quassel
163quiterss
164qutebrowser
228ranger 165ranger
166rhythmbox
167rtorrent
168scribus
169seamonkey
170seamonkey-bin
171simple-scan
172skanlite
173skype
174skypeforlinux
175slack
176soffice
177spectacle
178spotify
229ssh 179ssh
230Thunar 180start-tor-browser
181steam
182stellarium
183synfigstudio
184telegram
231thunar 185thunar
186Thunar
187thunderbird
188totem
232tracker 189tracker
190transmission-cli
191transmission-gtk
192transmission-qt
193transmission-show
194uget-gtk
195unbound
196viewnior
233viking 197viking
198virtualbox
199vivaldi
200vivaldi-beta
201vivaldi-stable
202vlc
203w3m
204warzone2100
205weechat
206weechat-curses
207wesnot
208wine
209wire
234wireshark 210wireshark
235xiphos 211xchat
236xed 212xed
237 213xfburn
238# weather/climate 214xiphos
239aweather 215xmms
240gnome-weather 216xonotic-glx
241 217xonotic-sdl
242# compressing tools 218xpdf
243ark 219xplayer
244atool 220xreader
245file-roller 221xviewer
222youtube-dl
223zathura
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-08 19:38:20 +0000