aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2019-08-21 21:50:32 +0000
committerLibravatar GitHub <noreply@github.com>2019-08-21 21:50:32 +0000
commita9b9cbfd98a6539fba30078374800791ed39b301 (patch)
tree98ba0d1cb2ea9373d23e3770dd251e9998851463
parentFix revert of previous trace fix. The issue was that programs were crashing b... (diff)
downloadfirejail-a9b9cbfd98a6539fba30078374800791ed39b301.tar.gz
firejail-a9b9cbfd98a6539fba30078374800791ed39b301.tar.zst
firejail-a9b9cbfd98a6539fba30078374800791ed39b301.zip
Refactor transmission profiles (#2920)
* Refactor transmission-cli * Create transmission-common.profile * Refactor transmission-create * Refactor transmission-daemon * Refactor transmission-edit * Refactor transmission-gtk * Refactor transmission-qt * Refactor transmission-remote-cli * Refactor transmission-remote-gtk * Refactor transmission-remote * Refactor transmission-show
Diffstat
-rw-r--r--etc/transmission-cli.profile38
-rw-r--r--etc/transmission-common.profile49
-rw-r--r--etc/transmission-create.profile4
-rw-r--r--etc/transmission-daemon.profile43
-rw-r--r--etc/transmission-edit.profile4
-rw-r--r--etc/transmission-gtk.profile48
-rw-r--r--etc/transmission-qt.profile48
-rw-r--r--etc/transmission-remote-cli.profile11
-rw-r--r--etc/transmission-remote-gtk.profile18
-rw-r--r--etc/transmission-remote.profile38
-rw-r--r--etc/transmission-show.profile38
11 files changed, 110 insertions, 229 deletions
diff --git a/etc/transmission-cli.profile b/etc/transmission-cli.profile
index 60732bcf2..d41b994a3 100644
--- a/etc/transmission-cli.profile
+++ b/etc/transmission-cli.profile
@@ -5,39 +5,11 @@ quiet
5# Persistent local customizations 5# Persistent local customizations
6include transmission-cli.local 6include transmission-cli.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8# added by included profile
9#include globals.local
9 10
10noblacklist ${HOME}/.cache/transmission 11#private-bin transmission-cli
11noblacklist ${HOME}/.config/transmission
12
13include disable-common.inc
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19
20apparmor
21caps.drop all
22machine-id
23netfilter
24nodbus
25nodvd
26nonewprivs
27noroot
28nosound
29notv
30nou2f
31novideo
32protocol inet,inet6
33seccomp
34shell none
35tracelog
36
37# private-bin transmission-cli
38private-dev
39private-etc alternatives,ca-certificates,crypto-policies,nsswitch.conf,pki,resolv.conf,ssl 12private-etc alternatives,ca-certificates,crypto-policies,nsswitch.conf,pki,resolv.conf,ssl
40private-lib
41private-tmp
42 13
43memory-deny-write-execute 14# Redirect
15include transmission-common.profile
diff --git a/etc/transmission-common.profile b/etc/transmission-common.profile
new file mode 100644
index 000000000..e786fa8a3
--- /dev/null
+++ b/etc/transmission-common.profile
@@ -0,0 +1,49 @@
1# Firejail profile for transmission-common
2# Description: Fast, easy and free BitTorrent client
3# This file is overwritten after every install/update
4quiet
5# Persistent local customizations
6include transmission-gtk.local
7# Persistent global definitions
8include globals.local
9
10noblacklist ${HOME}/.cache/transmission
11noblacklist ${HOME}/.config/transmission
12
13include disable-common.inc
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19
20mkdir ${HOME}/.cache/transmission
21mkdir ${HOME}/.config/transmission
22whitelist ${DOWNLOADS}
23whitelist ${HOME}/.cache/transmission
24whitelist ${HOME}/.config/transmission
25include whitelist-common.inc
26include whitelist-var-common.inc
27
28apparmor
29caps.drop all
30machine-id
31netfilter
32nodbus
33nodvd
34nonewprivs
35noroot
36nosound
37notv
38nou2f
39novideo
40protocol unix,inet,inet6
41seccomp
42shell none
43tracelog
44
45private-dev
46private-lib
47private-tmp
48
49memory-deny-write-execute
diff --git a/etc/transmission-create.profile b/etc/transmission-create.profile
index 92a4770e2..7c09878bc 100644
--- a/etc/transmission-create.profile
+++ b/etc/transmission-create.profile
@@ -8,5 +8,7 @@ include transmission-create.local
8# added by included profile 8# added by included profile
9#include globals.local 9#include globals.local
10 10
11private-bin transmission-create
12
11# Redirect 13# Redirect
12include transmission-cli.profile 14include transmission-common.profile
diff --git a/etc/transmission-daemon.profile b/etc/transmission-daemon.profile
index 9a6052ada..1c092ad17 100644
--- a/etc/transmission-daemon.profile
+++ b/etc/transmission-daemon.profile
@@ -5,40 +5,19 @@ quiet
5# Persistent local customizations 5# Persistent local customizations
6include transmission-daemon.local 6include transmission-daemon.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8# added by included profile
9#include globals.local
9 10
10noblacklist ${HOME}/.cache/transmission 11whitelist /var/lib/transmission
11noblacklist ${HOME}/.config/transmission
12 12
13include disable-common.inc 13caps.keep ipc_lock,net_bind_service,setgid,setuid,sys_chroot
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19 14
20apparmor 15#private-bin transmission-daemon
21caps.drop all
22machine-id
23netfilter
24nodbus
25nodvd
26nogroups
27nonewprivs
28noroot
29nosound
30notv
31nou2f
32novideo
33protocol inet,inet6
34seccomp
35shell none
36tracelog
37
38# private-bin transmission-daemon
39private-dev
40private-etc alternatives,ca-certificates,crypto-policies,nsswitch.conf,pki,resolv.conf,ssl 16private-etc alternatives,ca-certificates,crypto-policies,nsswitch.conf,pki,resolv.conf,ssl
41private-lib
42private-tmp
43 17
44memory-deny-write-execute 18read-write /var/lib/transmission
19writable-var-log
20writable-run-user
21
22# Redirect
23include transmission-common.profile
diff --git a/etc/transmission-edit.profile b/etc/transmission-edit.profile
index 6d8a98911..487ea8e51 100644
--- a/etc/transmission-edit.profile
+++ b/etc/transmission-edit.profile
@@ -8,5 +8,7 @@ include transmission-edit.local
8# added by included profile 8# added by included profile
9#include globals.local 9#include globals.local
10 10
11private-bin transmission-edit
12
11# Redirect 13# Redirect
12include transmission-cli.profile 14include transmission-common.profile
diff --git a/etc/transmission-gtk.profile b/etc/transmission-gtk.profile
index 29df63573..a45d672ac 100644
--- a/etc/transmission-gtk.profile
+++ b/etc/transmission-gtk.profile
@@ -1,50 +1,16 @@
1# Firejail profile for transmission-gtk 1# Firejail profile for transmission-gtk
2# Description: Fast, easy and free BitTorrent client (GTK GUI) 2# Description: Fast, easy and free BitTorrent client (GTK GUI)
3# This file is overwritten after every install/update 3# This file is overwritten after every install/update
4quiet
4# Persistent local customizations 5# Persistent local customizations
5include transmission-gtk.local 6include transmission-gtk.local
6# Persistent global definitions 7# Persistent global definitions
7include globals.local 8# added by included profile
8 9#include globals.local
9noblacklist ${HOME}/.cache/transmission
10noblacklist ${HOME}/.config/transmission
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18
19mkdir ${HOME}/.cache/transmission
20mkdir ${HOME}/.config/transmission
21whitelist ${DOWNLOADS}
22whitelist ${HOME}/.cache/transmission
23whitelist ${HOME}/.config/transmission
24include whitelist-common.inc
25include whitelist-var-common.inc
26
27apparmor
28caps.drop all
29machine-id
30netfilter
31nodbus
32nodvd
33nonewprivs
34noroot
35nosound
36notv
37nou2f
38novideo
39protocol unix,inet,inet6
40seccomp
41shell none
42tracelog
43 10
44private-bin transmission-gtk 11private-bin transmission-gtk
45private-dev
46private-lib
47private-tmp
48 12
49# Causes freeze during opening file dialog in Archlinux, see issue #1855 13ignore memory-deny-write-execute
50# memory-deny-write-execute 14
15# Redirect
16include transmission-common.profile
diff --git a/etc/transmission-qt.profile b/etc/transmission-qt.profile
index 9fda5245f..f207a7e90 100644
--- a/etc/transmission-qt.profile
+++ b/etc/transmission-qt.profile
@@ -1,49 +1,19 @@
1# Firejail profile for transmission-qt 1# Firejail profile for transmission-qt
2# Description: Fast, easy and free BitTorrent client (Qt GUI) 2# Description: Fast, easy and free BitTorrent client (Qt GUI)
3# This file is overwritten after every install/update 3# This file is overwritten after every install/update
4quiet
4# Persistent local customizations 5# Persistent local customizations
5include transmission-qt.local 6include transmission-qt.local
6# Persistent global definitions 7# Persistent global definitions
7include globals.local 8# added by included profile
9#include globals.local
8 10
9noblacklist ${HOME}/.cache/transmission 11private-bin transmission-qt
10noblacklist ${HOME}/.config/transmission
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18
19mkdir ${HOME}/.cache/transmission
20mkdir ${HOME}/.config/transmission
21whitelist ${DOWNLOADS}
22whitelist ${HOME}/.cache/transmission
23whitelist ${HOME}/.config/transmission
24include whitelist-common.inc
25include whitelist-var-common.inc
26 12
27apparmor 13# private-lib - breaks on Arch
28caps.drop all 14ignore private-lib
29machine-id
30netfilter
31nodbus
32nodvd
33nonewprivs
34noroot
35nosound
36notv
37nou2f
38novideo
39protocol unix,inet,inet6
40seccomp
41shell none
42tracelog
43 15
44private-bin transmission-qt 16ignore memory-deny-write-execute
45private-dev
46# private-lib - problems on Arch
47private-tmp
48 17
49# memory-deny-write-execute - problems on Qt 5.10.0, KDE Frameworks 5.41.0 18# Redirect
19include transmission-common.profile
diff --git a/etc/transmission-remote-cli.profile b/etc/transmission-remote-cli.profile
index 2e7a31545..6ae6a957c 100644
--- a/etc/transmission-remote-cli.profile
+++ b/etc/transmission-remote-cli.profile
@@ -12,15 +12,8 @@ include transmission-remote-cli.local
12include allow-python2.inc 12include allow-python2.inc
13include allow-python3.inc 13include allow-python3.inc
14 14
15mkdir ${HOME}/.cache/transmission 15private-bin python*,transmission-remote-cli
16mkdir ${HOME}/.config/transmission
17whitelist ${HOME}/.cache/transmission
18whitelist ${HOME}/.config/transmission
19include whitelist-common.inc
20include whitelist-var-common.inc
21
22# private-bin python*
23private-etc fonts 16private-etc fonts
24 17
25# Redirect 18# Redirect
26include transmission-remote.profile 19include transmission-common.profile
diff --git a/etc/transmission-remote-gtk.profile b/etc/transmission-remote-gtk.profile
index 5a57e4887..f0b313aed 100644
--- a/etc/transmission-remote-gtk.profile
+++ b/etc/transmission-remote-gtk.profile
@@ -8,14 +8,16 @@ include transmission-remote-gtk.local
8# added by included profile 8# added by included profile
9#include globals.local 9#include globals.local
10 10
11mkdir ${HOME}/.cache/transmission 11noblacklist ${HOME}/.config/transmission-remote-gtk
12mkdir ${HOME}/.config/transmission
13whitelist ${HOME}/.cache/transmission
14whitelist ${HOME}/.config/transmission
15include whitelist-common.inc
16include whitelist-var-common.inc
17 12
18private-etc fonts 13mkdir ${HOME}/.config/transmission-remote-gtk
14whitelist ${HOME}/.config/transmission-remote-gtk
15
16private-etc fonts,hostname,hosts,resolv.conf
17# Problems with private-lib (see issue #2889)
18ignore private-lib
19
20ignore memory-deny-write-execute
19 21
20# Redirect 22# Redirect
21include transmission-remote.profile 23include transmission-common.profile
diff --git a/etc/transmission-remote.profile b/etc/transmission-remote.profile
index ddeb9adf9..9ef7119d9 100644
--- a/etc/transmission-remote.profile
+++ b/etc/transmission-remote.profile
@@ -5,39 +5,11 @@ quiet
5# Persistent local customizations 5# Persistent local customizations
6include transmission-remote.local 6include transmission-remote.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8# added by included profile
9#include globals.local
9 10
10noblacklist ${HOME}/.cache/transmission 11private-bin transmission-remote
11noblacklist ${HOME}/.config/transmission
12
13include disable-common.inc
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19
20apparmor
21caps.drop all
22machine-id
23netfilter
24nodbus
25nodvd
26nonewprivs
27noroot
28nosound
29notv
30nou2f
31novideo
32protocol inet,inet6
33seccomp
34shell none
35tracelog
36
37# private-bin transmission-remote
38private-dev
39private-etc alternatives,hosts,nsswitch.conf 12private-etc alternatives,hosts,nsswitch.conf
40private-lib
41private-tmp
42 13
43memory-deny-write-execute 14# Redirect
15include transmission-common.profile
diff --git a/etc/transmission-show.profile b/etc/transmission-show.profile
index 779606f04..89051f956 100644
--- a/etc/transmission-show.profile
+++ b/etc/transmission-show.profile
@@ -1,41 +1,15 @@
1# Firejail profile for transmission-show 1# Firejail profile for transmission-show
2# Description: CLI utility to show BitTorrent .torrent file metadata 2# Description: CLI utility to show BitTorrent .torrent file metadata
3# This file is overwritten after every install/update 3# This file is overwritten after every install/update
4quiet
4# Persistent local customizations 5# Persistent local customizations
5include transmission-show.local 6include transmission-show.local
6# Persistent global definitions 7# Persistent global definitions
7include globals.local 8# added by included profile
9#include globals.local
8 10
9noblacklist ${HOME}/.cache/transmission 11private-bin transmission-show
10noblacklist ${HOME}/.config/transmission
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18
19apparmor
20caps.drop all
21machine-id
22netfilter
23nodbus
24nodvd
25nonewprivs
26noroot
27nosound
28notv
29nou2f
30novideo
31protocol inet,inet6
32seccomp
33shell none
34tracelog
35
36private-dev
37private-etc alternatives,hosts,nsswitch.conf 12private-etc alternatives,hosts,nsswitch.conf
38private-lib
39private-tmp
40 13
41memory-deny-write-execute 14# Redirect
15include transmission-common.profile
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-06-30 11:42:22 +0000