diff options
author | 2021-06-04 08:32:09 +0200 | |
---|---|---|
committer | 2021-06-08 12:49:39 +0200 | |
commit | 5e0628892fca5cf6f792c0d0dc5e972778b5627b (patch) | |
tree | 8a81431643c7fe3b7b0c5e8291d93375aa8a9dff /etc/profile-a-l | |
parent | fixup 9678da00301562464464099b9d7cfd76424fbb23 (diff) | |
download | firejail-5e0628892fca5cf6f792c0d0dc5e972778b5627b.tar.gz firejail-5e0628892fca5cf6f792c0d0dc5e972778b5627b.tar.zst firejail-5e0628892fca5cf6f792c0d0dc5e972778b5627b.zip |
Refactor bitwarden as electron redirect
Diffstat (limited to 'etc/profile-a-l')
-rw-r--r-- | etc/profile-a-l/bitwarden.profile | 44 |
1 files changed, 9 insertions, 35 deletions
diff --git a/etc/profile-a-l/bitwarden.profile b/etc/profile-a-l/bitwarden.profile index bef25276d..a30a3a29a 100644 --- a/etc/profile-a-l/bitwarden.profile +++ b/etc/profile-a-l/bitwarden.profile | |||
@@ -6,54 +6,28 @@ include bitwarden.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | ignore include whitelist-runuser-common.inc | ||
10 | ignore include whitelist-usr-share-common.inc | ||
11 | ignore disable-mnt | ||
12 | ignore dbus-user none | ||
13 | ignore dbus-system none | ||
14 | |||
9 | ignore noexec /tmp | 15 | ignore noexec /tmp |
10 | 16 | ||
11 | noblacklist ${HOME}/.config/Bitwarden | 17 | noblacklist ${HOME}/.config/Bitwarden |
12 | 18 | ||
13 | include disable-common.inc | ||
14 | include disable-devel.inc | ||
15 | include disable-exec.inc | ||
16 | include disable-interpreters.inc | ||
17 | include disable-passwdmgr.inc | ||
18 | include disable-programs.inc | ||
19 | include disable-shell.inc | 19 | include disable-shell.inc |
20 | include disable-xdg.inc | ||
21 | 20 | ||
22 | mkdir ${HOME}/.config/Bitwarden | 21 | mkdir ${HOME}/.config/Bitwarden |
23 | whitelist ${HOME}/.config/Bitwarden | 22 | whitelist ${HOME}/.config/Bitwarden |
24 | whitelist ${DOWNLOADS} | ||
25 | include whitelist-common.inc | ||
26 | include whitelist-var-common.inc | ||
27 | 23 | ||
28 | apparmor | ||
29 | caps.drop all | ||
30 | machine-id | 24 | machine-id |
31 | netfilter | ||
32 | no3d | 25 | no3d |
33 | nodvd | ||
34 | nogroups | ||
35 | noinput | ||
36 | nonewprivs | ||
37 | noroot | ||
38 | nosound | 26 | nosound |
39 | notv | 27 | |
40 | nou2f | ||
41 | novideo | ||
42 | protocol unix,inet,inet6,netlink | ||
43 | seccomp !chroot | ||
44 | shell none | ||
45 | #tracelog - breaks on Arch | ||
46 | |||
47 | private-bin bitwarden | ||
48 | private-cache | ||
49 | ?HAS_APPIMAGE: ignore private-dev | 28 | ?HAS_APPIMAGE: ignore private-dev |
50 | private-dev | ||
51 | private-etc alternatives,ca-certificates,crypto-policies,fonts,hosts,nsswitch.conf,pki,resolv.conf,ssl | 29 | private-etc alternatives,ca-certificates,crypto-policies,fonts,hosts,nsswitch.conf,pki,resolv.conf,ssl |
52 | private-opt Bitwarden | 30 | private-opt Bitwarden |
53 | private-tmp | ||
54 | |||
55 | # breaks appindicator (tray) functionality | ||
56 | # dbus-user none | ||
57 | # dbus-system none | ||
58 | 31 | ||
59 | #memory-deny-write-execute - breaks on Arch (see issue #1803) | 32 | # Redirect |
33 | include electron.profile | ||