aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/balsa.profile
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2023-01-04 21:13:22 +0000
committerLibravatar GitHub <noreply@github.com>2023-01-04 21:13:22 +0000
commitcde712aec5453a9ee204fcf31b4223a07075681a (patch)
tree2da3a7adfe3e4ae2851124db05fb7e14c2216f0a /etc/profile-a-l/balsa.profile
parentMerge branch 'master' of ssh://github.com/netblue30/firejail (diff)
downloadfirejail-cde712aec5453a9ee204fcf31b4223a07075681a.tar.gz
firejail-cde712aec5453a9ee204fcf31b4223a07075681a.tar.zst
firejail-cde712aec5453a9ee204fcf31b4223a07075681a.zip
balsa: refactor as email-common.profile redirect
Diffstat (limited to 'etc/profile-a-l/balsa.profile')
-rw-r--r--etc/profile-a-l/balsa.profile61
1 files changed, 2 insertions, 59 deletions
diff --git a/etc/profile-a-l/balsa.profile b/etc/profile-a-l/balsa.profile
index 661356ff6..c3a3dcf57 100644
--- a/etc/profile-a-l/balsa.profile
+++ b/etc/profile-a-l/balsa.profile
@@ -7,76 +7,19 @@ include balsa.local
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.balsa 9noblacklist ${HOME}/.balsa
10noblacklist ${HOME}/.gnupg
11noblacklist ${HOME}/.mozilla
12noblacklist ${HOME}/.signature
13noblacklist ${HOME}/mail 10noblacklist ${HOME}/mail
14noblacklist /var/mail
15noblacklist /var/spool/mail
16 11
17include disable-common.inc
18include disable-devel.inc
19include disable-exec.inc
20include disable-interpreters.inc
21include disable-programs.inc
22include disable-shell.inc 12include disable-shell.inc
23include disable-xdg.inc
24 13
25mkdir ${HOME}/.balsa 14mkdir ${HOME}/.balsa
26mkdir ${HOME}/.gnupg
27mkfile ${HOME}/.signature
28mkdir ${HOME}/mail 15mkdir ${HOME}/mail
29whitelist ${HOME}/.balsa 16whitelist ${HOME}/.balsa
30whitelist ${HOME}/.gnupg
31whitelist ${HOME}/.mozilla/firefox/profiles.ini
32whitelist ${HOME}/.signature
33whitelist ${HOME}/mail 17whitelist ${HOME}/mail
34whitelist ${RUNUSER}/gnupg
35whitelist /usr/share/balsa 18whitelist /usr/share/balsa
36whitelist /usr/share/gnupg
37whitelist /usr/share/gnupg2
38whitelist /var/mail
39whitelist /var/spool/mail
40include whitelist-common.inc
41include whitelist-runuser-common.inc
42include whitelist-usr-share-common.inc
43include whitelist-var-common.inc
44 19
45apparmor
46caps.drop all
47netfilter
48no3d
49nodvd
50nogroups
51noinput
52nonewprivs
53noroot
54nosound
55notv
56nou2f
57novideo
58protocol unix,inet,inet6
59seccomp
60tracelog
61
62# disable-mnt
63# Add "pinentry-curses,pinentry-emacs,pinentry-fltk,pinentry-gnome3,pinentry-gtk,pinentry-gtk2,pinentry-gtk-2,pinentry-qt,pinentry-qt4,pinentry-tty,pinentry-x2go,pinentry-kwallet" for gpg
64# Add "ignore private-bin" for hyperlinks or have a look at the private-bins in firefox.profile and firefox-common.profile.
65private-bin balsa,balsa-ab,gpg,gpg-agent,gpg2,gpgsm 20private-bin balsa,balsa-ab,gpg,gpg-agent,gpg2,gpgsm
66private-cache
67private-dev
68private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gcrypt,groups,gtk-2.0,gtk-3.0,hostname,hosts,ld.so.cache,ld.so.preload,mailname,passwd,pki,resolv.conf,selinux,ssl,xdg
69private-tmp
70writable-run-user
71writable-var
72 21
73dbus-user filter
74dbus-user.own org.desktop.Balsa 22dbus-user.own org.desktop.Balsa
75dbus-user.talk ca.desrt.dconf
76dbus-user.talk org.freedesktop.Notifications
77dbus-user.talk org.freedesktop.secrets
78dbus-user.talk org.gnome.keyring.SystemPrompter
79dbus-system none
80 23
81read-only ${HOME}/.mozilla/firefox/profiles.ini 24# Redirect
82restrict-namespaces 25include email-common.profile