aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@protonmail.com>2024-04-29 12:50:46 -0400
committerLibravatar netblue30 <netblue30@protonmail.com>2024-04-29 12:50:46 -0400
commit4c5f558995acb202a4ae3aee08022da854b6ebb2 (patch)
treec4a3e9f202bcf828ba5bcd437f478ca4f1e6270b /etc/profile-a-l
parentwhitelisting /var/games by default (diff)
downloadfirejail-4c5f558995acb202a4ae3aee08022da854b6ebb2.tar.gz
firejail-4c5f558995acb202a4ae3aee08022da854b6ebb2.tar.zst
firejail-4c5f558995acb202a4ae3aee08022da854b6ebb2.zip
several kids programs
Diffstat (limited to 'etc/profile-a-l')
-rw-r--r--etc/profile-a-l/alienblaster.profile55
-rw-r--r--etc/profile-a-l/geki2.profile49
-rw-r--r--etc/profile-a-l/geki3.profile49
-rw-r--r--etc/profile-a-l/lbreakouthd.profile59
4 files changed, 212 insertions, 0 deletions
diff --git a/etc/profile-a-l/alienblaster.profile b/etc/profile-a-l/alienblaster.profile
new file mode 100644
index 000000000..0e0478a49
--- /dev/null
+++ b/etc/profile-a-l/alienblaster.profile
@@ -0,0 +1,55 @@
1# Firejail profile for alienblaster
2# Persistent local customizations
3include alienblaster.local
4# Persistent global definitions
5include globals.local
6
7noblacklist ${HOME}/.alienblaster
8noblacklist ${HOME}/.alienblaster_highscore
9
10include disable-common.inc
11include disable-devel.inc
12include disable-exec.inc
13include disable-interpreters.inc
14include disable-programs.inc
15include disable-xdg.inc
16
17mkfile ${HOME}/.alienblaster_highscore
18whitelist ${HOME}/.alienblaster_highscore
19mkdir ${HOME}/.alienblaster
20whitelist ${HOME}/.alienblaster
21include whitelist-common.inc
22include whitelist-run-common.inc
23whitelist ${RUNUSER}/pulse
24include whitelist-runuser-common.inc
25whitelist /usr/share/games/alienblaster
26whitelist /usr/share/timidity
27include whitelist-usr-share-common.inc
28include whitelist-var-common.inc
29
30apparmor
31caps.drop all
32ipc-namespace
33netfilter
34net none
35nodvd
36noinput
37nonewprivs
38noroot
39notv
40nou2f
41novideo
42protocol unix
43seccomp
44tracelog
45
46disable-mnt
47private-dev
48private-etc @x11,@sound,@games
49private-tmp
50
51dbus-user none
52dbus-system none
53
54memory-deny-write-execute
55restrict-namespaces
diff --git a/etc/profile-a-l/geki2.profile b/etc/profile-a-l/geki2.profile
new file mode 100644
index 000000000..32ff9c8af
--- /dev/null
+++ b/etc/profile-a-l/geki2.profile
@@ -0,0 +1,49 @@
1# Firejail profile for geki2
2# Persistent local customizations
3include geki2.local
4# Persistent global definitions
5include globals.local
6
7include disable-common.inc
8include disable-devel.inc
9include disable-exec.inc
10include disable-interpreters.inc
11include disable-programs.inc
12include disable-shell.inc
13include disable-xdg.inc
14
15include whitelist-run-common.inc
16include whitelist-runuser-common.inc
17whitelist /usr/share/games/geki2
18include whitelist-usr-share-common.inc
19writable-var # game scores stored under /var/games
20include whitelist-var-common.inc
21
22apparmor
23caps.drop all
24ipc-namespace
25net none
26netfilter
27nodvd
28noinput
29nonewprivs
30noroot
31notv
32nou2f
33novideo
34protocol unix
35seccomp
36tracelog
37
38disable-mnt
39private
40private-bin geki2
41private-dev
42private-etc @x11,@sound,@games
43private-tmp
44
45dbus-user none
46dbus-system none
47
48memory-deny-write-execute
49restrict-namespaces
diff --git a/etc/profile-a-l/geki3.profile b/etc/profile-a-l/geki3.profile
new file mode 100644
index 000000000..de2167724
--- /dev/null
+++ b/etc/profile-a-l/geki3.profile
@@ -0,0 +1,49 @@
1# Firejail profile for geki3
2# Persistent local customizations
3include geki3.local
4# Persistent global definitions
5include globals.local
6
7include disable-common.inc
8include disable-devel.inc
9include disable-exec.inc
10include disable-interpreters.inc
11include disable-programs.inc
12include disable-shell.inc
13include disable-xdg.inc
14
15include whitelist-run-common.inc
16include whitelist-runuser-common.inc
17whitelist /usr/share/games/geki3
18include whitelist-usr-share-common.inc
19writable-var # game scores stored under /var/games
20include whitelist-var-common.inc
21
22apparmor
23caps.drop all
24ipc-namespace
25net none
26netfilter
27nodvd
28noinput
29nonewprivs
30noroot
31notv
32nou2f
33novideo
34protocol unix
35seccomp
36tracelog
37
38disable-mnt
39private
40private-bin geki3
41private-dev
42private-etc @x11,@sound,@games
43private-tmp
44
45dbus-user none
46dbus-system none
47
48memory-deny-write-execute
49restrict-namespaces
diff --git a/etc/profile-a-l/lbreakouthd.profile b/etc/profile-a-l/lbreakouthd.profile
new file mode 100644
index 000000000..095a3839c
--- /dev/null
+++ b/etc/profile-a-l/lbreakouthd.profile
@@ -0,0 +1,59 @@
1# Firejail profile for lbreakouthd
2# Persistent local customizations
3include lbreakouthd.local
4# Persistent global definitions
5include globals.local
6
7# Note: this profile requires the current user to be a member of games group
8
9noblacklist ${HOME}/.lbreakouthd
10
11include disable-common.inc
12include disable-devel.inc
13include disable-exec.inc
14include disable-interpreters.inc
15include disable-programs.inc
16include disable-shell.inc
17include disable-xdg.inc
18
19mkdir ${HOME}/.lbreakouthd
20whitelist ${HOME}/.lbreakouthd
21include whitelist-common.inc
22
23whitelist /run/udev/control
24whitelist /run/host/container-manager
25include whitelist-run-common.inc
26whitelist ${RUNUSER}/pulse
27include whitelist-runuser-common.inc
28whitelist /usr/share/games/lbreakouthd
29include whitelist-usr-share-common.inc
30writable-var # game scores stored under /var/games
31include whitelist-var-common.inc
32
33apparmor
34caps.drop all
35ipc-namespace
36net none
37netfilter
38nodvd
39noinput
40nonewprivs
41noroot
42notv
43nou2f
44novideo
45protocol unix
46seccomp
47tracelog
48
49disable-mnt
50private-bin lbreakouthd
51private-dev
52private-etc @x11,@sound,@games
53private-tmp
54
55dbus-user none
56dbus-system none
57
58memory-deny-write-execute
59restrict-namespaces
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-10 01:11:50 +0000