aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2016-11-30 11:25:37 -0500
committerLibravatar GitHub <noreply@github.com>2016-11-30 11:25:37 -0500
commit041c4e6a2f460f42bba30b9720a68a7076b6e304 (patch)
treeb4a2cab5d0d0193bb5b35ed0e8123542c42ef420
parentMerge pull request #949 from valoq/master (diff)
parentAdd 10 new profiles (diff)
downloadfirejail-041c4e6a2f460f42bba30b9720a68a7076b6e304.tar.gz
firejail-041c4e6a2f460f42bba30b9720a68a7076b6e304.tar.zst
firejail-041c4e6a2f460f42bba30b9720a68a7076b6e304.zip
Merge pull request #946 from SpotComms/master
Added 10 new profiles
Diffstat
-rw-r--r--etc/bless.profile20
-rw-r--r--etc/disable-programs.inc7
-rw-r--r--etc/gnome-2048.profile25
-rw-r--r--etc/gnome-calculator.profile19
-rw-r--r--etc/gnome-contacts.profile19
-rw-r--r--etc/jd-gui.profile19
-rw-r--r--etc/lollypop.profile20
-rw-r--r--etc/multimc5.profile27
-rw-r--r--etc/pdfsam.profile17
-rw-r--r--etc/pithos.profile19
-rw-r--r--etc/xonotic-glx.profile5
-rw-r--r--etc/xonotic-sdl.profile5
-rw-r--r--etc/xonotic.profile25
13 files changed, 227 insertions, 0 deletions
diff --git a/etc/bless.profile b/etc/bless.profile
new file mode 100644
index 000000000..752edadf7
--- /dev/null
+++ b/etc/bless.profile
@@ -0,0 +1,20 @@
1#
2#Profile for bless
3#
4
5#No Blacklist Paths
6noblacklist ${HOME}/.config/bless
7
8#Blacklist Paths
9include /etc/firejail/disable-common.inc
10include /etc/firejail/disable-programs.inc
11include /etc/firejail/disable-passwdmgr.inc
12include /etc/firejail/disable-devel.inc
13
14#Options
15caps.drop all
16netfilter
17nonewprivs
18noroot
19protocol unix,inet,inet6
20seccomp
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 76a4c4607..f46274545 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -10,6 +10,7 @@ blacklist ${HOME}/.stellarium
10blacklist ${HOME}/.sword 10blacklist ${HOME}/.sword
11blacklist ${HOME}/.xiphos 11blacklist ${HOME}/.xiphos
12blacklist ${HOME}/.config/Atom 12blacklist ${HOME}/.config/Atom
13blacklist ${HOME}/.config/bless
13blacklist ${HOME}/.config/gthumb 14blacklist ${HOME}/.config/gthumb
14blacklist ${HOME}/.config/mupen64plus 15blacklist ${HOME}/.config/mupen64plus
15blacklist ${HOME}/.config/transmission 16blacklist ${HOME}/.config/transmission
@@ -44,6 +45,7 @@ blacklist ${HOME}/.openshot_qt
44blacklist ${HOME}/.flowblade 45blacklist ${HOME}/.flowblade
45blacklist ${HOME}/.config/flowblade 46blacklist ${HOME}/.config/flowblade
46blacklist ${HOME}/.config/eog 47blacklist ${HOME}/.config/eog
48blacklist ${HOME}/.config/jd-gui.cfg
47 49
48 50
49# Media players 51# Media players
@@ -56,6 +58,7 @@ blacklist ${HOME}/.config/totem
56blacklist ${HOME}/.config/xplayer 58blacklist ${HOME}/.config/xplayer
57blacklist ${HOME}/.audacity-data 59blacklist ${HOME}/.audacity-data
58blacklist ${HOME}/.guayadeque 60blacklist ${HOME}/.guayadeque
61blacklist ${HOME}/.local/share/lollypop
59 62
60# HTTP / FTP / Mail 63# HTTP / FTP / Mail
61blacklist ${HOME}/.icedove 64blacklist ${HOME}/.icedove
@@ -119,6 +122,10 @@ blacklist ${HOME}/.config/wesnoth
119blacklist ${HOME}/.config/0ad 122blacklist ${HOME}/.config/0ad
120blacklist ${HOME}/.warzone2100-3.1 123blacklist ${HOME}/.warzone2100-3.1
121blacklist ${HOME}/.dosbox 124blacklist ${HOME}/.dosbox
125blacklist ${HOME}/.local/share/gnome-2048
126blacklist ${HOME}/.local/share/multimc5
127blacklist ${HOME}/.multimc5
128blacklist ${HOME}/.xonotic
122 129
123# Cryptocoins 130# Cryptocoins
124blacklist ${HOME}/.*coin 131blacklist ${HOME}/.*coin
diff --git a/etc/gnome-2048.profile b/etc/gnome-2048.profile
new file mode 100644
index 000000000..f9982da61
--- /dev/null
+++ b/etc/gnome-2048.profile
@@ -0,0 +1,25 @@
1#
2#Profile for gnome-2048
3#
4
5#No Blacklist Paths
6noblacklist ${HOME}/.local/share/gnome-2048
7
8#Blacklist Paths
9include /etc/firejail/disable-common.inc
10include /etc/firejail/disable-programs.inc
11include /etc/firejail/disable-passwdmgr.inc
12include /etc/firejail/disable-devel.inc
13
14#Whitelist Paths
15mkdir ${HOME}/.local/share/gnome-2048
16whitelist ${HOME}/.local/share/gnome-2048
17include /etc/firejail/whitelist-common.inc
18
19#Options
20caps.drop all
21netfilter
22nonewprivs
23noroot
24protocol unix,inet,inet6
25seccomp
diff --git a/etc/gnome-calculator.profile b/etc/gnome-calculator.profile
new file mode 100644
index 000000000..49e068171
--- /dev/null
+++ b/etc/gnome-calculator.profile
@@ -0,0 +1,19 @@
1#
2#Profile for gnome-calculator
3#
4
5#Blacklist Paths
6include /etc/firejail/disable-common.inc
7include /etc/firejail/disable-programs.inc
8include /etc/firejail/disable-passwdmgr.inc
9include /etc/firejail/disable-devel.inc
10
11include /etc/firejail/whitelist-common.inc
12
13#Options
14caps.drop all
15netfilter
16nonewprivs
17noroot
18protocol unix,inet,inet6
19seccomp
diff --git a/etc/gnome-contacts.profile b/etc/gnome-contacts.profile
new file mode 100644
index 000000000..9dc25b26c
--- /dev/null
+++ b/etc/gnome-contacts.profile
@@ -0,0 +1,19 @@
1#
2#Profile for gnome-contacts
3#
4
5#Blacklist Paths
6include /etc/firejail/disable-common.inc
7include /etc/firejail/disable-programs.inc
8include /etc/firejail/disable-passwdmgr.inc
9include /etc/firejail/disable-devel.inc
10
11include /etc/firejail/whitelist-common.inc
12
13#Options
14caps.drop all
15netfilter
16nonewprivs
17noroot
18protocol unix,inet,inet6
19seccomp
diff --git a/etc/jd-gui.profile b/etc/jd-gui.profile
new file mode 100644
index 000000000..1d6eb41f8
--- /dev/null
+++ b/etc/jd-gui.profile
@@ -0,0 +1,19 @@
1#
2#Profile for jd-gui
3#
4
5noblacklist ${HOME}/.config/jd-gui.cfg
6
7#Blacklist Paths
8include /etc/firejail/disable-common.inc
9include /etc/firejail/disable-programs.inc
10include /etc/firejail/disable-passwdmgr.inc
11include /etc/firejail/disable-devel.inc
12
13#Options
14caps.drop all
15netfilter
16nonewprivs
17noroot
18protocol unix,inet,inet6
19seccomp
diff --git a/etc/lollypop.profile b/etc/lollypop.profile
new file mode 100644
index 000000000..41a662bca
--- /dev/null
+++ b/etc/lollypop.profile
@@ -0,0 +1,20 @@
1#
2#Profile for lollypop
3#
4
5#No Blacklist Paths
6noblacklist ${HOME}/.local/share/lollypop
7
8#Blacklist Paths
9include /etc/firejail/disable-common.inc
10include /etc/firejail/disable-programs.inc
11include /etc/firejail/disable-passwdmgr.inc
12include /etc/firejail/disable-devel.inc
13
14#Options
15caps.drop all
16netfilter
17nonewprivs
18noroot
19protocol unix,inet,inet6
20seccomp
diff --git a/etc/multimc5.profile b/etc/multimc5.profile
new file mode 100644
index 000000000..cc310f294
--- /dev/null
+++ b/etc/multimc5.profile
@@ -0,0 +1,27 @@
1#
2#Profile for multimc5
3#
4
5#No Blacklist Paths
6noblacklist ${HOME}/.local/share/multimc5
7noblacklist ${HOME}/.multimc5
8
9#Blacklist Paths
10include /etc/firejail/disable-common.inc
11include /etc/firejail/disable-programs.inc
12include /etc/firejail/disable-passwdmgr.inc
13include /etc/firejail/disable-devel.inc
14
15#Whitelist Paths
16mkdir ${HOME}/.local/share/multimc5
17whitelist ${HOME}/.local/share/multimc5
18mkdir ${HOME}/.multimc5
19whitelist ${HOME}/.multimc5
20include /etc/firejail/whitelist-common.inc
21
22#Options
23caps.drop all
24netfilter
25nonewprivs
26noroot
27protocol unix,inet,inet6
diff --git a/etc/pdfsam.profile b/etc/pdfsam.profile
new file mode 100644
index 000000000..6e50f37cf
--- /dev/null
+++ b/etc/pdfsam.profile
@@ -0,0 +1,17 @@
1#
2#Profile for pdfsam
3#
4
5#Blacklist Paths
6include /etc/firejail/disable-common.inc
7include /etc/firejail/disable-programs.inc
8include /etc/firejail/disable-passwdmgr.inc
9include /etc/firejail/disable-devel.inc
10
11#Options
12caps.drop all
13netfilter
14nonewprivs
15noroot
16protocol unix,inet,inet6
17seccomp
diff --git a/etc/pithos.profile b/etc/pithos.profile
new file mode 100644
index 000000000..8270b8bee
--- /dev/null
+++ b/etc/pithos.profile
@@ -0,0 +1,19 @@
1#
2#Profile for pithos
3#
4
5#Blacklist Paths
6include /etc/firejail/disable-common.inc
7include /etc/firejail/disable-programs.inc
8include /etc/firejail/disable-passwdmgr.inc
9include /etc/firejail/disable-devel.inc
10
11include /etc/firejail/whitelist-common.inc
12
13#Options
14caps.drop all
15netfilter
16nonewprivs
17noroot
18protocol unix,inet,inet6
19seccomp
diff --git a/etc/xonotic-glx.profile b/etc/xonotic-glx.profile
new file mode 100644
index 000000000..b255ffdbb
--- /dev/null
+++ b/etc/xonotic-glx.profile
@@ -0,0 +1,5 @@
1#
2#Profile for xonotic:xonotic-glx
3#
4
5include /etc/firejail/xonotic.profile
diff --git a/etc/xonotic-sdl.profile b/etc/xonotic-sdl.profile
new file mode 100644
index 000000000..783667304
--- /dev/null
+++ b/etc/xonotic-sdl.profile
@@ -0,0 +1,5 @@
1#
2#Profile for xonotic:xonotic-sdl
3#
4
5include /etc/firejail/xonotic.profile
diff --git a/etc/xonotic.profile b/etc/xonotic.profile
new file mode 100644
index 000000000..75d649619
--- /dev/null
+++ b/etc/xonotic.profile
@@ -0,0 +1,25 @@
1#
2#Profile for xonotic
3#
4
5#No Blacklist Paths
6noblacklist ${HOME}/.xonotic
7
8#Blacklist Paths
9include /etc/firejail/disable-common.inc
10include /etc/firejail/disable-programs.inc
11include /etc/firejail/disable-passwdmgr.inc
12include /etc/firejail/disable-devel.inc
13
14#Whitelist Paths
15mkdir ${HOME}/.xonotic
16whitelist ${HOME}/.xonotic
17include /etc/firejail/whitelist-common.inc
18
19#Options
20caps.drop all
21netfilter
22nonewprivs
23noroot
24protocol unix,inet,inet6
25seccomp
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-06-29 08:43:33 +0000