aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2020-03-20 11:16:00 +0100
committerLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2020-03-22 13:20:55 +0100
commit05819c05840054cb587b8d307b51b1273df55e9e (patch)
tree18f9e1cf8aac7a1da1b73b5601af08994167b1d1
parentiagno profile (diff)
downloadfirejail-05819c05840054cb587b8d307b51b1273df55e9e.tar.gz
firejail-05819c05840054cb587b8d307b51b1273df55e9e.tar.zst
firejail-05819c05840054cb587b8d307b51b1273df55e9e.zip
new profiles: agenda, gnome-pomodoro, gnome-todo
rules for xdg-dbus-proxy: dbus-user filter dbus-user.own org.gnome.Pomodoro dbus-user.talk ca.desrt.dconf dbus-user.talk org.gnome.Shell dbus-system none dbus-user filter dbus-user.own org.gnome.Todo dbus-user.talk ca.desrt.dconf dbus-user.talk org.gnome.evolution.dataserver.AddressBook9 dbus-user.talk org.gnome.evolution.dataserver.Calendar8 dbus-user.talk org.gnome.evolution.dataserver.Sources5 dbus-user.talk org.gnome.evolution.dataserver.Subprocess.Backend.* dbus-user.talk org.gnome.OnlineAccounts dbus-user.talk org.gnome.SettingsDaemon.Color dbus-system filter dbus-system.talk org.freedesktop.login1 dbus-user filter dbus.own com.github.dahenson.agenda dbus.talk ca.desrt.dconf dbus-system block
Diffstat
-rw-r--r--README.md2
-rw-r--r--RELNOTES4
-rw-r--r--etc/com.github.dahenson.agenda.profile60
-rw-r--r--etc/disable-programs.inc4
-rw-r--r--etc/gnome-pomodoro.profile51
-rw-r--r--etc/gnome-todo.profile51
-rw-r--r--etc/lrzuntar.profile1
-rw-r--r--src/firecfg/firecfg.config3
8 files changed, 173 insertions, 3 deletions
diff --git a/README.md b/README.md
index 76c889590..d2ead8bff 100644
--- a/README.md
+++ b/README.md
@@ -176,4 +176,4 @@ Run ./profstats -h for help.
176### New profiles: 176### New profiles:
177 177
178gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, gnome-passwordsafe, bibtex, gummi, latex, pdflatex, tex, wpp, wpspdf, wps, et, multimc, gnome-hexgl, com.github.johnfactotum.Foliate, desktopeditors, impressive, mupdf-gl, mupdf-x11, mupdf-x11-curl, muraster, mutool, planmaker18, planmaker18free, presentations18, presentations18free, textmaker18, textmaker18free, teams, xournal, 178gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, gnome-passwordsafe, bibtex, gummi, latex, pdflatex, tex, wpp, wpspdf, wps, et, multimc, gnome-hexgl, com.github.johnfactotum.Foliate, desktopeditors, impressive, mupdf-gl, mupdf-x11, mupdf-x11-curl, muraster, mutool, planmaker18, planmaker18free, presentations18, presentations18free, textmaker18, textmaker18free, teams, xournal,
179gnome-screenshot, ripperX, sound-juicer, iagno 179gnome-screenshot, ripperX, sound-juicer, iagno, com.github.dahenson.agenda, gnome-pomodoro, gnome-todo
diff --git a/RELNOTES b/RELNOTES
index afd6bdbbd..9f4ff4dc6 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -9,7 +9,9 @@ firejail (0.9.63) baseline; urgency=low
9 * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool 9 * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
10 * new profiles: desktopeditors, impressive, planmaker18, planmaker18free 10 * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
11 * new profiles: presentations18, presentations18free, textmaker18, teams 11 * new profiles: presentations18, presentations18free, textmaker18, teams
12 * new profiles: textmaker18free, xournal, gnome-screenshot 12 * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
13 * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
14 * new profiles: gnome-todo
13 15
14firejail (0.9.62) baseline; urgency=low 16firejail (0.9.62) baseline; urgency=low
15 * added file-copy-limit in /etc/firejail/firejail.config 17 * added file-copy-limit in /etc/firejail/firejail.config
diff --git a/etc/com.github.dahenson.agenda.profile b/etc/com.github.dahenson.agenda.profile
new file mode 100644
index 000000000..ea5370649
--- /dev/null
+++ b/etc/com.github.dahenson.agenda.profile
@@ -0,0 +1,60 @@
1# Firejail profile for com.github.dahenson.agenda
2# Description: Simple, fast, no-nonsense to-do (task) list
3# This file is overwritten after every install/update
4# Persistent local customizations
5include com.github.dahenson.agenda.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.cache/agenda
10noblacklist ${HOME}/.config/agenda
11noblacklist ${HOME}/.local/share/agenda
12
13include disable-common.inc
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19include disable-xdg.inc
20
21mkdir ${HOME}/.cache/agenda
22mkdir ${HOME}/.config/agenda
23mkdir ${HOME}/.local/share/agenda
24whitelist ${HOME}/.cache/agenda
25whitelist ${HOME}/.config/agenda
26whitelist ${HOME}/.local/share/agenda
27include whitelist-common.inc
28include whitelist-usr-share-common.inc
29include whitelist-runuser-common.inc
30include whitelist-var-common.inc
31
32apparmor
33caps.drop all
34machine-id
35net none
36no3d
37nodvd
38nogroups
39nonewprivs
40noroot
41nosound
42notv
43nou2f
44novideo
45protocol unix
46seccomp
47shell none
48tracelog
49
50disable-mnt
51private-bin com.github.dahenson.agenda
52private-cache
53private-dev
54private-etc dconf,fonts,gtk-3.0
55private-tmp
56
57read-only ${HOME}
58read-write ${HOME}/.cache/agenda
59read-write ${HOME}/.config/agenda
60read-write ${HOME}/.local/share/agenda
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index b54c1cce3..0b00947f5 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -116,6 +116,7 @@ blacklist ${HOME}/.config/Thunar
116blacklist ${HOME}/.config/VirtualBox 116blacklist ${HOME}/.config/VirtualBox
117blacklist ${HOME}/.config/Wire 117blacklist ${HOME}/.config/Wire
118blacklist ${HOME}/.config/Zeal 118blacklist ${HOME}/.config/Zeal
119blacklist ${HOME}/.config/agenda
119blacklist ${HOME}/.config/akonadi* 120blacklist ${HOME}/.config/akonadi*
120blacklist ${HOME}/.config/akregatorrc 121blacklist ${HOME}/.config/akregatorrc
121blacklist ${HOME}/.config/ardour4 122blacklist ${HOME}/.config/ardour4
@@ -497,6 +498,7 @@ blacklist ${HOME}/.local/share/TpLogger
497blacklist ${HOME}/.local/share/Zeal 498blacklist ${HOME}/.local/share/Zeal
498blacklist ${HOME}/.local/share/akonadi* 499blacklist ${HOME}/.local/share/akonadi*
499blacklist ${HOME}/.local/share/akregator 500blacklist ${HOME}/.local/share/akregator
501blacklist ${HOME}/.local/share/agenda
500blacklist ${HOME}/.local/share/apps/korganizer 502blacklist ${HOME}/.local/share/apps/korganizer
501blacklist ${HOME}/.local/share/aspyr-media 503blacklist ${HOME}/.local/share/aspyr-media
502blacklist ${HOME}/.local/share/autokey 504blacklist ${HOME}/.local/share/autokey
@@ -534,6 +536,7 @@ blacklist ${HOME}/.local/share/gnome-builder
534blacklist ${HOME}/.local/share/gnome-latex 536blacklist ${HOME}/.local/share/gnome-latex
535blacklist ${HOME}/.local/share/gnome-music 537blacklist ${HOME}/.local/share/gnome-music
536blacklist ${HOME}/.local/share/gnome-photos 538blacklist ${HOME}/.local/share/gnome-photos
539blacklist ${HOME}/.local/share/gnome-pomodoro
537blacklist ${HOME}/.local/share/gnome-recipes 540blacklist ${HOME}/.local/share/gnome-recipes
538blacklist ${HOME}/.local/share/gnome-ring 541blacklist ${HOME}/.local/share/gnome-ring
539blacklist ${HOME}/.local/share/gnome-twitch 542blacklist ${HOME}/.local/share/gnome-twitch
@@ -729,6 +732,7 @@ blacklist ${HOME}/.cache/MusicBrainz
729blacklist ${HOME}/.cache/QuiteRss 732blacklist ${HOME}/.cache/QuiteRss
730blacklist ${HOME}/.cache/Tox 733blacklist ${HOME}/.cache/Tox
731blacklist ${HOME}/.cache/Zeal 734blacklist ${HOME}/.cache/Zeal
735blacklist ${HOME}/.cache/agenda
732blacklist ${HOME}/.cache/akonadi* 736blacklist ${HOME}/.cache/akonadi*
733blacklist ${HOME}/.cache/atril 737blacklist ${HOME}/.cache/atril
734blacklist ${HOME}/.cache/attic 738blacklist ${HOME}/.cache/attic
diff --git a/etc/gnome-pomodoro.profile b/etc/gnome-pomodoro.profile
new file mode 100644
index 000000000..f8be23f07
--- /dev/null
+++ b/etc/gnome-pomodoro.profile
@@ -0,0 +1,51 @@
1# Firejail profile for gnome-pomodoro
2# Description: time management utility for GNOME based on the pomodoro technique
3# This file is overwritten after every install/update
4# Persistent local customizations
5include gnome-pomodoro.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.local/share/gnome-pomodoro
10
11include disable-common.inc
12include disable-devel.inc
13include disable-exec.inc
14include disable-interpreters.inc
15include disable-passwdmgr.inc
16include disable-programs.inc
17include disable-xdg.inc
18
19mkdir ${HOME}/.local/share/gnome-pomodoro
20whitelist ${HOME}/.local/share/gnome-pomodoro
21whitelist /usr/share/gnome-pomodoro
22include whitelist-common.inc
23include whitelist-usr-share-common.inc
24include whitelist-runuser-common.inc
25include whitelist-var-common.inc
26
27apparmor
28caps.drop all
29net none
30no3d
31nodvd
32nogroups
33nonewprivs
34noroot
35notv
36nou2f
37novideo
38protocol unix
39seccomp
40shell none
41tracelog
42
43disable-mnt
44private-bin gnome-pomodoro
45private-cache
46private-dev
47private-etc dconf,fonts,gtk-3.0,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,machine-id
48private-tmp
49
50read-only ${HOME}
51read-write ${HOME}/.local/share/gnome-pomodoro
diff --git a/etc/gnome-todo.profile b/etc/gnome-todo.profile
new file mode 100644
index 000000000..6240cce65
--- /dev/null
+++ b/etc/gnome-todo.profile
@@ -0,0 +1,51 @@
1# Firejail profile for gnome-todo
2# Description: Personal task manager for GNOME
3# This file is overwritten after every install/update
4# Persistent local customizations
5include gnome-todo.local
6# Persistent global definitions
7include globals.local
8
9# Allow python (blacklisted by disable-interpreters.inc)
10include allow-python3.inc
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18include disable-xdg.inc
19
20whitelist /usr/share/gnome-todo
21include whitelist-common.inc
22include whitelist-usr-share-common.inc
23include whitelist-runuser-common.inc
24include whitelist-var-common.inc
25
26apparmor
27caps.drop all
28machine-id
29net none
30nodvd
31nogroups
32nonewprivs
33noroot
34nosound
35notv
36nou2f
37novideo
38protocol unix
39seccomp
40shell none
41tracelog
42
43disable-mnt
44#private
45private-bin gnome-todo
46private-cache
47private-dev
48private-etc dconf,fonts,gtk-3.0,localtime,passwd,xdg
49private-tmp
50
51read-only ${HOME}
diff --git a/etc/lrzuntar.profile b/etc/lrzuntar.profile
index 17215a5d7..245d1c669 100644
--- a/etc/lrzuntar.profile
+++ b/etc/lrzuntar.profile
@@ -7,7 +7,6 @@ include lrzuntar.local
7# Persistent global definitions 7# Persistent global definitions
8# added by included profile 8# added by included profile
9#include globals.local 9#include globals.local
10quiet
11 10
12# Redirect 11# Redirect
13include cpio.profile 12include cpio.profile
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index c20a4cf50..e62779e70 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -129,6 +129,7 @@ clocks
129cmus 129cmus
130code 130code
131code-oss 131code-oss
132com.github.dahenson.agenda
132com.github.johnfactotum.Foliate 133com.github.johnfactotum.Foliate
133conkeror 134conkeror
134conky 135conky
@@ -275,10 +276,12 @@ gnome-music
275gnome-nettool 276gnome-nettool
276gnome-passwordsafe 277gnome-passwordsafe
277gnome-photos 278gnome-photos
279gnome-pomodoro
278gnome-recipes 280gnome-recipes
279gnome-schedule 281gnome-schedule
280gnome-screenshot 282gnome-screenshot
281gnome-system-log 283gnome-system-log
284gnome-todo
282gnome-twitch 285gnome-twitch
283gnome-weather 286gnome-weather
284godot 287godot
generated by cgit v1.2.3-54-g00ecf (git 2.45.1) at 2024-05-28 15:17:08 +0000