aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2020-02-10 09:18:57 +0100
committerLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2020-02-10 09:24:06 +0100
commitdf1c73a00f68b3ee2503b75d3220e65f99a7f760 (patch)
tree683adf8f26858a3b8e6a2a99720c352abe4f22e6
parentimprove baloo hardening suggestion (diff)
downloadfirejail-df1c73a00f68b3ee2503b75d3220e65f99a7f760.tar.gz
firejail-df1c73a00f68b3ee2503b75d3220e65f99a7f760.tar.zst
firejail-df1c73a00f68b3ee2503b75d3220e65f99a7f760.zip
Add a lot of profiles
Diffstat
-rw-r--r--README.md2
-rw-r--r--RELNOTES10
-rw-r--r--etc/com.github.johnfactotum.Foliate.profile62
-rw-r--r--etc/desktopeditors.profile43
-rw-r--r--etc/disable-common.inc1
-rw-r--r--etc/disable-programs.inc4
-rw-r--r--etc/freeoffice-planmaker.profile36
-rw-r--r--etc/freeoffice-presentations.profile36
-rw-r--r--etc/freeoffice-textmaker.profile37
-rw-r--r--etc/impressive.profile55
-rw-r--r--etc/mupdf-gl.profile13
-rw-r--r--etc/mupdf-x11-curl.profile18
-rw-r--r--etc/mupdf-x11.profile14
-rw-r--r--etc/mupdf.profile6
-rw-r--r--etc/muraster.profile11
-rw-r--r--etc/mutool.profile11
-rw-r--r--etc/planmaker18.profile10
-rw-r--r--etc/planmaker18free.profile10
-rw-r--r--etc/presentations18.profile10
-rw-r--r--etc/presentations18free.profile10
-rw-r--r--etc/softmaker-common.inc44
-rw-r--r--etc/textmaker18.profile10
-rw-r--r--etc/textmaker18free.profile10
-rw-r--r--src/firecfg/firecfg.config14
24 files changed, 370 insertions, 107 deletions
diff --git a/README.md b/README.md
index 8d2fb534b..4391ac331 100644
--- a/README.md
+++ b/README.md
@@ -151,4 +151,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe
151 151
152### New profiles: 152### New profiles:
153 153
154gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, gnome-passwordsafe, bibtex, gummi, latex, pdflatex, tex, wpp, wpspdf, wps, et, multimc, gnome-hexgl 154gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, gnome-passwordsafe, bibtex, gummi, latex, pdflatex, tex, wpp, wpspdf, wps, et, multimc, gnome-hexgl, com.github.johnfactotum.Foliate, desktopeditors, impressive, mupdf-gl, mupdf-x11, mupdf-x11-curl, muraster, mutool, planmaker18, planmaker18free, presentations18, presentations18free, textmaker18, textmaker18free
diff --git a/RELNOTES b/RELNOTES
index 09e43e090..6e75b28a0 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -1,10 +1,12 @@
1firejail (0.9.63) baseline; urgency=low 1firejail (0.9.63) baseline; urgency=low
2 * work in progress 2 * work in progress
3 * DHCP client support 3 * DHCP client support
4 * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab 4 * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
5 * new profiles: gnome-passwordsafe, bibtex, gummi, latex 5 * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
6 * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc 6 * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
7 * new profiles: gnome-hexgl 7 * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
8 * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
9 * new profiles: presentations18, presentations18free, textmaker18, textmaker18free
8 10
9firejail (0.9.62) baseline; urgency=low 11firejail (0.9.62) baseline; urgency=low
10 * added file-copy-limit in /etc/firejail/firejail.config 12 * added file-copy-limit in /etc/firejail/firejail.config
diff --git a/etc/com.github.johnfactotum.Foliate.profile b/etc/com.github.johnfactotum.Foliate.profile
new file mode 100644
index 000000000..39a9a360d
--- /dev/null
+++ b/etc/com.github.johnfactotum.Foliate.profile
@@ -0,0 +1,62 @@
1# Firejail profile for foliate
2# Description: Simple and modern GTK eBook reader
3# This file is overwritten after every install/update
4# Persistent local customizations
5include foliate.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${DOCUMENTS}
10noblacklist ${HOME}/.cache/com.github.johnfactotum.Foliate
11noblacklist ${HOME}/.local/share/com.github.johnfactotum.Foliate
12
13# Allow gjs (blacklisted by disable-interpreters.inc)
14include allow-gjs.inc
15
16include disable-common.inc
17include disable-devel.inc
18include disable-exec.inc
19include disable-interpreters.inc
20include disable-passwdmgr.inc
21include disable-programs.inc
22include disable-xdg.inc
23
24mkdir ${HOME}/.cache/com.github.johnfactotum.Foliate
25mkdir ${HOME}/.local/share/com.github.johnfactotum.Foliate
26whitelist ${HOME}/.cache/com.github.johnfactotum.Foliate
27whitelist ${HOME}/.local/share/com.github.johnfactotum.Foliate
28whitelist ${DOCUMENTS}
29whitelist ${DOWNLOADS}
30whitelist /usr/share/com.github.johnfactotum.Foliate
31whitelist /usr/share/hyphen
32include whitelist-common.inc
33include whitelist-usr-share-common.inc
34include whitelist-var-common.inc
35
36apparmor
37caps.drop all
38machine-id
39net none
40nodvd
41nogroups
42nonewprivs
43noroot
44nosound
45notv
46nou2f
47novideo
48protocol unix
49seccomp
50shell none
51tracelog
52
53disable-mnt
54private-bin com.github.johnfactotum.Foliate,gjs
55private-cache
56private-dev
57private-etc dconf,fonts,gconf,gtk-3.0
58private-tmp
59
60read-only ${HOME}
61read-write ${HOME}/.cache/com.github.johnfactotum.Foliate
62read-write ${HOME}/.local/share/com.github.johnfactotum.Foliate
diff --git a/etc/desktopeditors.profile b/etc/desktopeditors.profile
new file mode 100644
index 000000000..d0c727c5c
--- /dev/null
+++ b/etc/desktopeditors.profile
@@ -0,0 +1,43 @@
1# Firejail profile for desktopeditors
2# Description: ONLYOFFICE DesktopEditors
3# This file is overwritten after every install/update
4# Persistent local customizations
5include desktopeditors.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/onlyoffice
10noblacklist ${HOME}/.local/share/onlyoffice
11noblacklist ${HOME}/.pki
12
13include disable-common.inc
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19
20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc
22
23apparmor
24caps.drop all
25ipc-namespace
26netfilter
27nodbus
28nodvd
29nogroups
30nonewprivs
31noroot
32notv
33nou2f
34novideo
35protocol unix,inet,inet6,netlink
36seccomp
37shell none
38tracelog
39
40private-bin desktopeditors,sh
41private-cache
42private-dev
43private-tmp
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 9f351a673..bf29cd137 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -18,6 +18,7 @@ blacklist-nolog ${HOME}/.kde4/share/apps/klipper
18blacklist-nolog ${HOME}/.local/share/fish/fish_history 18blacklist-nolog ${HOME}/.local/share/fish/fish_history
19blacklist-nolog ${HOME}/.local/share/klipper 19blacklist-nolog ${HOME}/.local/share/klipper
20blacklist-nolog ${HOME}/.macromedia 20blacklist-nolog ${HOME}/.macromedia
21blacklist-nolog ${HOME}/.mupdf.history
21blacklist-nolog ${HOME}/.python-history 22blacklist-nolog ${HOME}/.python-history
22blacklist-nolog ${HOME}/.python_history 23blacklist-nolog ${HOME}/.python_history
23blacklist-nolog ${HOME}/.pythonhist 24blacklist-nolog ${HOME}/.pythonhist
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 02751a818..7e4947e6f 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -267,6 +267,7 @@ blacklist ${HOME}/.config/obs-studio
267blacklist ${HOME}/.config/okularpartrc 267blacklist ${HOME}/.config/okularpartrc
268blacklist ${HOME}/.config/okularrc 268blacklist ${HOME}/.config/okularrc
269blacklist ${HOME}/.config/onionshare 269blacklist ${HOME}/.config/onionshare
270blacklist ${HOME}/.config/onlyoffice
270blacklist ${HOME}/.config/opera 271blacklist ${HOME}/.config/opera
271blacklist ${HOME}/.config/opera-beta 272blacklist ${HOME}/.config/opera-beta
272blacklist ${HOME}/.config/orage 273blacklist ${HOME}/.config/orage
@@ -503,6 +504,7 @@ blacklist ${HOME}/.local/share/caja-python
503blacklist ${HOME}/.local/share/cantata 504blacklist ${HOME}/.local/share/cantata
504blacklist ${HOME}/.local/share/cdprojektred 505blacklist ${HOME}/.local/share/cdprojektred
505blacklist ${HOME}/.local/share/clipit 506blacklist ${HOME}/.local/share/clipit
507blacklist ${HOME}/.local/share/com.github.johnfactotum.Foliate
506blacklist ${HOME}/.local/share/contacts 508blacklist ${HOME}/.local/share/contacts
507blacklist ${HOME}/.local/share/data/Mendeley Ltd. 509blacklist ${HOME}/.local/share/data/Mendeley Ltd.
508blacklist ${HOME}/.local/share/data/Mumble 510blacklist ${HOME}/.local/share/data/Mumble
@@ -571,6 +573,7 @@ blacklist ${HOME}/.local/share/nomacs
571blacklist ${HOME}/.local/share/notes 573blacklist ${HOME}/.local/share/notes
572blacklist ${HOME}/.local/share/ocenaudio 574blacklist ${HOME}/.local/share/ocenaudio
573blacklist ${HOME}/.local/share/okular 575blacklist ${HOME}/.local/share/okular
576blacklist ${HOME}/.local/share/onlyoffice
574blacklist ${HOME}/.local/share/orage 577blacklist ${HOME}/.local/share/orage
575blacklist ${HOME}/.local/share/org.kde.gwenview 578blacklist ${HOME}/.local/share/org.kde.gwenview
576blacklist ${HOME}/.local/share/pix 579blacklist ${HOME}/.local/share/pix
@@ -734,6 +737,7 @@ blacklist ${HOME}/.cache/champlain
734blacklist ${HOME}/.cache/chromium 737blacklist ${HOME}/.cache/chromium
735blacklist ${HOME}/.cache/chromium-dev 738blacklist ${HOME}/.cache/chromium-dev
736blacklist ${HOME}/.cache/cliqz 739blacklist ${HOME}/.cache/cliqz
740blacklist ${HOME}/.cache/com.github.johnfactotum.Foliate
737blacklist ${HOME}/.cache/darktable 741blacklist ${HOME}/.cache/darktable
738blacklist ${HOME}/.cache/discover 742blacklist ${HOME}/.cache/discover
739blacklist ${HOME}/.cache/dnox 743blacklist ${HOME}/.cache/dnox
diff --git a/etc/freeoffice-planmaker.profile b/etc/freeoffice-planmaker.profile
index 8a53c63e3..b6ca167eb 100644
--- a/etc/freeoffice-planmaker.profile
+++ b/etc/freeoffice-planmaker.profile
@@ -1,38 +1,10 @@
1# Firejail profile for freeoffice-planmaker 1# Firejail profile alias for freeoffice-planmaker
2# Description: SoftMaker FreeOffice - spreadsheet program
2# This file is overwritten after every install/update 3# This file is overwritten after every install/update
3# Persistent local customizations 4# Persistent local customizations
4include freeoffice-planmaker.local 5include freeoffice-planmaker.local
5# Persistent global definitions 6# Persistent global definitions
6include globals.local 7include globals.local
7 8
8noblacklist ${HOME}/SoftMaker 9# Redirect
9 10include softmaker-common.profile
10include disable-common.inc
11include disable-devel.inc
12include disable-exec.inc
13include disable-interpreters.inc
14include disable-passwdmgr.inc
15include disable-programs.inc
16# include disable-xdg.inc
17
18apparmor
19caps.drop all
20ipc-namespace
21netfilter
22no3d
23nodbus
24nodvd
25nogroups
26nonewprivs
27noroot
28notv
29nou2f
30novideo
31protocol unix,inet,inet6
32seccomp
33shell none
34tracelog
35
36private-cache
37private-dev
38private-tmp
diff --git a/etc/freeoffice-presentations.profile b/etc/freeoffice-presentations.profile
index 63be4da7f..43661028c 100644
--- a/etc/freeoffice-presentations.profile
+++ b/etc/freeoffice-presentations.profile
@@ -1,38 +1,10 @@
1# Firejail profile for freeoffice-presentations 1# Firejail profile alias for freeoffice-presentations
2# Description: SoftMaker FreeOffice - presentations software
2# This file is overwritten after every install/update 3# This file is overwritten after every install/update
3# Persistent local customizations 4# Persistent local customizations
4include freeoffice-presentations.local 5include freeoffice-presentations.local
5# Persistent global definitions 6# Persistent global definitions
6include globals.local 7include globals.local
7 8
8noblacklist ${HOME}/SoftMaker 9# Redirect
9 10include softmaker-common.profile
10include disable-common.inc
11include disable-devel.inc
12include disable-exec.inc
13include disable-interpreters.inc
14include disable-passwdmgr.inc
15include disable-programs.inc
16# include disable-xdg.inc
17
18apparmor
19caps.drop all
20ipc-namespace
21netfilter
22no3d
23nodbus
24nodvd
25nogroups
26nonewprivs
27noroot
28notv
29nou2f
30novideo
31protocol unix,inet,inet6
32seccomp
33shell none
34tracelog
35
36private-cache
37private-dev
38private-tmp
diff --git a/etc/freeoffice-textmaker.profile b/etc/freeoffice-textmaker.profile
index 4bca5a98c..f7d30eaed 100644
--- a/etc/freeoffice-textmaker.profile
+++ b/etc/freeoffice-textmaker.profile
@@ -1,38 +1,9 @@
1# Firejail profile for freeoffice-textmaker 1# Firejail profile alias for freeoffice-textmaker
2# Description: SoftMaker Office - word processor
2# This file is overwritten after every install/update 3# This file is overwritten after every install/update
3# Persistent local customizations
4include freeoffice-textmaker.local 4include freeoffice-textmaker.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/SoftMaker 8# Redirect
9 9include softmaker-common.profile
10include disable-common.inc
11include disable-devel.inc
12include disable-exec.inc
13include disable-interpreters.inc
14include disable-passwdmgr.inc
15include disable-programs.inc
16# include disable-xdg.inc
17
18apparmor
19caps.drop all
20ipc-namespace
21netfilter
22no3d
23nodbus
24nodvd
25nogroups
26nonewprivs
27noroot
28notv
29nou2f
30novideo
31protocol unix,inet,inet6
32seccomp
33shell none
34tracelog
35
36private-cache
37private-dev
38private-tmp
diff --git a/etc/impressive.profile b/etc/impressive.profile
new file mode 100644
index 000000000..0bfe5de5a
--- /dev/null
+++ b/etc/impressive.profile
@@ -0,0 +1,55 @@
1# Firejail profile for impressive
2# Description: presentation tool with eye candy
3# This file is overwritten after every install/update
4# Persistent local customizations
5include impressive.local
6# Persistent global definitions
7#include globals.local
8
9noblacklist ${DOCUMENTS}
10noblacklist /sbin
11noblacklist /usr/sbin
12
13# Allow python (blacklisted by disable-interpreters.inc)
14#include allow-python2.inc
15include allow-python3.inc
16
17include disable-common.inc
18include disable-devel.inc
19include disable-exec.inc
20include disable-interpreters.inc
21include disable-passwdmgr.inc
22include disable-programs.inc
23include disable-xdg.inc
24
25mkdir ${HOME}/.cache/mesa_shader_cache
26whitelist /usr/share/opengl-games-utils
27whitelist /usr/share/zenity
28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc
30
31apparmor
32caps.drop all
33ipc-namespace
34machine-id
35net none
36nodbus
37nodvd
38nogroups
39nonewprivs
40noroot
41nosound
42notv
43nou2f
44novideo
45protocol unix
46seccomp
47shell none
48tracelog
49
50private-cache
51private-dev
52private-tmp
53
54read-only ${HOME}
55read-write ${HOME}/.cache/mesa_shader_cache
diff --git a/etc/mupdf-gl.profile b/etc/mupdf-gl.profile
new file mode 100644
index 000000000..be94a9083
--- /dev/null
+++ b/etc/mupdf-gl.profile
@@ -0,0 +1,13 @@
1# Firejail profile for mupdf-gl
2# Description: Lightweight PDF viewer
3# This file is overwritten after every install/update
4# Persistent local customizations
5include mupdf-gl.local
6# Persistent global definitions
7# added by included profile
8#include globals.local
9
10noblacklist ${HOME}/.mupdf.history
11
12# Redirect
13include mupdf.profile
diff --git a/etc/mupdf-x11-curl.profile b/etc/mupdf-x11-curl.profile
new file mode 100644
index 000000000..a04d386a2
--- /dev/null
+++ b/etc/mupdf-x11-curl.profile
@@ -0,0 +1,18 @@
1# Firejail profile for mupdf-x11-curl
2# Description: Lightweight PDF viewer
3# This file is overwritten after every install/update
4# Persistent local customizations
5include mupdf-x11-curl.local
6# Persistent global definitions
7# added by included profile
8#include globals.local
9
10ignore net none
11
12netfilter
13protocol unix,inet,inet6
14
15private-etc ca-certificates,crypto-policies,hosts,nsswitch.conf,pki,resolv.conf,ssl
16
17# Redirect
18include mupdf.profile
diff --git a/etc/mupdf-x11.profile b/etc/mupdf-x11.profile
new file mode 100644
index 000000000..256201d0c
--- /dev/null
+++ b/etc/mupdf-x11.profile
@@ -0,0 +1,14 @@
1# Firejail profile for mupdf-x11
2# Description: Lightweight PDF viewer
3# This file is overwritten after every install/update
4# Persistent local customizations
5include mupdf-x11.local
6# Persistent global definitions
7# added by included profile
8#include globals.local
9
10memory-deny-write-execute
11read-only ${HOME}
12
13# Redirect
14include mupdf.profile
diff --git a/etc/mupdf.profile b/etc/mupdf.profile
index 99945bdc9..43afbc859 100644
--- a/etc/mupdf.profile
+++ b/etc/mupdf.profile
@@ -4,7 +4,7 @@
4# Persistent local customizations 4# Persistent local customizations
5include mupdf.local 5include mupdf.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7#include globals.local
8 8
9noblacklist ${DOCUMENTS} 9noblacklist ${DOCUMENTS}
10 10
@@ -35,10 +35,6 @@ seccomp
35shell none 35shell none
36tracelog 36tracelog
37 37
38# private-bin mupdf,rm,sh,tempfile
39private-dev 38private-dev
40private-etc alternatives,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload 39private-etc alternatives,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload
41private-tmp 40private-tmp
42
43# memory-deny-write-execute
44read-only ${HOME}
diff --git a/etc/muraster.profile b/etc/muraster.profile
new file mode 100644
index 000000000..90e3f2050
--- /dev/null
+++ b/etc/muraster.profile
@@ -0,0 +1,11 @@
1# Firejail profile for muraster
2# Description: Lightweight PDF viewer
3# This file is overwritten after every install/update
4# Persistent local customizations
5include muraster.local
6# Persistent global definitions
7# added by included profile
8#include globals.local
9
10# Redirect
11include mupdf.profile
diff --git a/etc/mutool.profile b/etc/mutool.profile
new file mode 100644
index 000000000..e61f4665d
--- /dev/null
+++ b/etc/mutool.profile
@@ -0,0 +1,11 @@
1# Firejail profile for mutool
2# Description: Lightweight PDF viewer
3# This file is overwritten after every install/update
4# Persistent local customizations
5include mutool.local
6# Persistent global definitions
7# added by included profile
8#include globals.local
9
10# Redirect
11include mupdf.profile
diff --git a/etc/planmaker18.profile b/etc/planmaker18.profile
new file mode 100644
index 000000000..4cf1efb7f
--- /dev/null
+++ b/etc/planmaker18.profile
@@ -0,0 +1,10 @@
1# Firejail profile for planmaker18
2# Description: SoftMaker Office - spreadsheet program
3# This file is overwritten after every install/update
4# Persistent local customizations
5include planmaker18.local
6# Persistent global definitions
7include globals.local
8
9# Redirect
10include softmaker-common.profile
diff --git a/etc/planmaker18free.profile b/etc/planmaker18free.profile
new file mode 100644
index 000000000..bb85f1fc7
--- /dev/null
+++ b/etc/planmaker18free.profile
@@ -0,0 +1,10 @@
1# Firejail profile for planmaker18free
2# Description: SoftMaker FreeOffice - spreadsheet program
3# This file is overwritten after every install/update
4# Persistent local customizations
5include planmaker18free.local
6# Persistent global definitions
7include globals.local
8
9# Redirect
10include softmaker-common.profile
diff --git a/etc/presentations18.profile b/etc/presentations18.profile
new file mode 100644
index 000000000..ac844d1af
--- /dev/null
+++ b/etc/presentations18.profile
@@ -0,0 +1,10 @@
1# Firejail profile for presentations18
2# Description: SoftMaker Office - presentations software
3# This file is overwritten after every install/update
4# Persistent local customizations
5include presentations18.local
6# Persistent global definitions
7include globals.local
8
9# Redirect
10include softmaker-common.profile
diff --git a/etc/presentations18free.profile b/etc/presentations18free.profile
new file mode 100644
index 000000000..218747224
--- /dev/null
+++ b/etc/presentations18free.profile
@@ -0,0 +1,10 @@
1# Firejail profile for presentations18free
2# Description: SoftMaker FreeOffice - presentations software
3# This file is overwritten after every install/update
4# Persistent local customizations
5include presentations18free.local
6# Persistent global definitions
7include globals.local
8
9# Redirect
10include softmaker-common.profile
diff --git a/etc/softmaker-common.inc b/etc/softmaker-common.inc
new file mode 100644
index 000000000..6eaadee12
--- /dev/null
+++ b/etc/softmaker-common.inc
@@ -0,0 +1,44 @@
1# Firejail profile for softmaker-common
2# This file is overwritten after every install/update
3# Persistent local customizations
4include softmaker-common.local
5# Persistent global definitions
6# added by caller profile
7#include globals.local
8
9noblacklist ${HOME}/SoftMaker
10
11include disable-common.inc
12include disable-devel.inc
13include disable-exec.inc
14include disable-interpreters.inc
15include disable-passwdmgr.inc
16include disable-programs.inc
17
18whitelist /usr/share/office2018
19whitelist /usr/share/freeoffice2018
20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc
22
23apparmor
24caps.drop all
25ipc-namespace
26netfilter
27nodbus
28nodvd
29nogroups
30nonewprivs
31noroot
32notv
33nou2f
34novideo
35protocol unix,inet,inet6
36seccomp
37shell none
38tracelog
39
40private-bin freeoffice-planmaker,freeoffice-presentations,freeoffice-textmaker,planmaker18,planmaker18free,presentations18,presentations18free,sh,textmaker18,textmaker18free
41private-cache
42private-dev
43private-etc ca-certificates,crypto-policies,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id,nsswitch.conf,pki,SoftMaker,ssl
44private-tmp
diff --git a/etc/textmaker18.profile b/etc/textmaker18.profile
new file mode 100644
index 000000000..8284df791
--- /dev/null
+++ b/etc/textmaker18.profile
@@ -0,0 +1,10 @@
1# Firejail profile for textmaker18
2# Description: SoftMaker Office - word processor
3# This file is overwritten after every install/update
4# Persistent local customizations
5include textmaker18.local
6# Persistent global definitions
7include globals.local
8
9# Redirect
10include softmaker-common.profile
diff --git a/etc/textmaker18free.profile b/etc/textmaker18free.profile
new file mode 100644
index 000000000..ad945ca55
--- /dev/null
+++ b/etc/textmaker18free.profile
@@ -0,0 +1,10 @@
1# Firejail profile for textmaker18free
2# Description: SoftMaker Office - word processor
3# This file is overwritten after every install/update
4# Persistent local customizations
5include textmaker18free.local
6# Persistent global definitions
7include globals.local
8
9# Redirect
10include softmaker-common.profile
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 51ec06402..5fdc60af6 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -128,6 +128,7 @@ clocks
128cmus 128cmus
129code 129code
130code-oss 130code-oss
131com.github.johnfactotum.Foliate
131conkeror 132conkeror
132conky 133conky
133conplay 134conplay
@@ -143,6 +144,7 @@ dconf-editor
143ddgtk 144ddgtk
144deadbeef 145deadbeef
145deluge 146deluge
147desktopeditors
146devhelp 148devhelp
147dex2jar 149dex2jar
148dia 150dia
@@ -310,6 +312,7 @@ ideaIC
310idea.sh 312idea.sh
311imagej 313imagej
312img2txt 314img2txt
315impressive
313inkscape 316inkscape
314inkview 317inkview
315inox 318inox
@@ -436,9 +439,14 @@ multimc
436multimc5 439multimc5
437mumble 440mumble
438mupdf 441mupdf
442mupdf-gl
443mupdf-x11
444mupdf-x11-curl
439mupen64plus 445mupen64plus
446muraster
440musescore 447musescore
441musixmatch 448musixmatch
449mutool
442mutt 450mutt
443mypaint 451mypaint
444mypaint-ora-thumbnailer 452mypaint-ora-thumbnailer
@@ -500,12 +508,16 @@ pioneer
500pithos 508pithos
501pitivi 509pitivi
502pix 510pix
511planmaker18
512planmaker18free
503playonlinux 513playonlinux
504pluma 514pluma
505pngquant 515pngquant
506polari 516polari
507ppsspp 517ppsspp
508pragha 518pragha
519presentations18
520presentations18free
509profanity 521profanity
510psi-plus 522psi-plus
511pybitmessage 523pybitmessage
@@ -593,6 +605,8 @@ teeworlds
593telegram 605telegram
594telegram-desktop 606telegram-desktop
595terasology 607terasology
608textmaker18
609textmaker18free
596thunderbird 610thunderbird
597thunderbird-beta 611thunderbird-beta
598thunderbird-wayland 612thunderbird-wayland
generated by cgit v1.2.3-54-g00ecf (git 2.45.1) at 2024-05-28 01:28:00 +0000