aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
diff options
context:
space:
mode:
authorLibravatar kortewegdevries <kortewegdevries@protonmail.ch>2020-09-02 10:34:14 +0000
committerLibravatar GitHub <noreply@github.com>2020-09-02 10:34:14 +0000
commita5e2b31c6263665854a449552649f6538f35a9fc (patch)
treef3e678f5137906f226a7f1b0d5002fa80e8d93b2 /etc/profile-m-z
parentMerge branch 'master' of https://github.com/netblue30/firejail (diff)
downloadfirejail-a5e2b31c6263665854a449552649f6538f35a9fc.tar.gz
firejail-a5e2b31c6263665854a449552649f6538f35a9fc.tar.zst
firejail-a5e2b31c6263665854a449552649f6538f35a9fc.zip
Various profiles (#3561)
* Various profiles Initial * Various fixes # 1 Removed blacklist,no3d; added icon flatpak paths;sorting;added space
Diffstat (limited to 'etc/profile-m-z')
-rw-r--r--etc/profile-m-z/menulibre.profile65
-rw-r--r--etc/profile-m-z/musictube.profile57
-rw-r--r--etc/profile-m-z/onboard.profile55
3 files changed, 177 insertions, 0 deletions
diff --git a/etc/profile-m-z/menulibre.profile b/etc/profile-m-z/menulibre.profile
new file mode 100644
index 000000000..f029e4696
--- /dev/null
+++ b/etc/profile-m-z/menulibre.profile
@@ -0,0 +1,65 @@
1# Firejail profile for menulibre
2# Description: Create desktop and menu launchers easily
3# This file is overwritten after every install/update
4# Persistent local customizations
5include menulibre.local
6# Persistent global definitions
7include globals.local
8
9include allow-python2.inc
10include allow-python3.inc
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-programs.inc
17include disable-passwdmgr.inc
18include disable-xdg.inc
19
20# Whitelist your system icon directory,varies by distro
21whitelist /usr/share/app-info
22whitelist /usr/share/desktop-directories
23whitelist /usr/share/icons
24whitelist /usr/share/menulibre
25whitelist /var/lib/app-info/icons
26# Flatpak desktop directory
27whitelist /var/lib/flatpak/exports/share/applications
28whitelist /var/lib/flatpak/exports/share/icons
29# Snap desktop directory
30
31include whitelist-runuser-common.inc
32include whitelist-usr-share-common.inc
33include whitelist-var-common.inc
34
35apparmor
36caps.drop all
37machine-id
38net none
39nodvd
40no3d
41nogroups
42nonewprivs
43noroot
44nosound
45notv
46nou2f
47novideo
48protocol unix
49seccomp
50shell none
51tracelog
52
53disable-mnt
54private-cache
55private-dev
56private-etc alternatives,dconf,fonts,gtk-3.0,locale.alias,locale.conf,mime.types,nsswitch.conf,passwd,pki,selinux,X11,xdg
57private-tmp
58
59dbus-user none
60dbus-system none
61
62read-write ${HOME}/.config/menus
63read-write ${HOME}/.gnome/apps
64read-write ${HOME}/.local/share/applications
65read-write ${HOME}/.local/share/flatpak/exports
diff --git a/etc/profile-m-z/musictube.profile b/etc/profile-m-z/musictube.profile
new file mode 100644
index 000000000..955df698d
--- /dev/null
+++ b/etc/profile-m-z/musictube.profile
@@ -0,0 +1,57 @@
1# Firejail profile for musictube
2# Description: Stream music
3# This file is overwritten after every install/update
4# Persistent local customizations
5include musictube.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.cache/Flavio Tordini
10noblacklist ${HOME}/.config/Flavio Tordini
11noblacklist ${HOME}/.local/share/Flavio Tordini
12
13include disable-common.inc
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19include disable-shell.inc
20include disable-xdg.inc
21
22mkdir ${HOME}/.cache/Flavio Tordini
23mkdir ${HOME}/.config/Flavio Tordini
24mkdir ${HOME}/.local/share/Flavio Tordini
25whitelist ${HOME}/.cache/Flavio Tordini
26whitelist ${HOME}/.config/Flavio Tordini
27whitelist ${HOME}/.local/share/Flavio Tordini
28whitelist /usr/share/musictube
29include whitelist-common.inc
30include whitelist-runuser-common.inc
31include whitelist-usr-share-common.inc
32include whitelist-var-common.inc
33
34apparmor
35caps.drop all
36netfilter
37nodvd
38nogroups
39nonewprivs
40noroot
41notv
42nou2f
43novideo
44protocol unix,inet,inet6,netlink
45seccomp
46shell none
47tracelog
48
49disable-mnt
50private-bin musictube
51private-cache
52private-dev
53private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,drirc,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id,mime.types,nsswitch.conf,pki,pulse,resolv.conf,selinux,ssl,X11,xdg
54private-tmp
55
56dbus-user none
57dbus-system none
diff --git a/etc/profile-m-z/onboard.profile b/etc/profile-m-z/onboard.profile
new file mode 100644
index 000000000..3a235a677
--- /dev/null
+++ b/etc/profile-m-z/onboard.profile
@@ -0,0 +1,55 @@
1# Firejail profile for onboard
2# Description: On-screen keyboard
3# This file is overwritten after every install/update
4# Persistent local customizations
5include onboard.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/onboard
10
11include allow-python2.inc
12include allow-python3.inc
13
14include disable-common.inc
15include disable-devel.inc
16include disable-exec.inc
17include disable-interpreters.inc
18include disable-programs.inc
19include disable-passwdmgr.inc
20include disable-shell.inc
21include disable-xdg.inc
22
23mkdir ${HOME}/.config/onboard
24whitelist ${HOME}/.config/onboard
25whitelist /usr/share/onboard
26include whitelist-common.inc
27include whitelist-usr-share-common.inc
28include whitelist-runuser-common.inc
29include whitelist-var-common.inc
30
31apparmor
32caps.drop all
33machine-id
34net none
35nodvd
36no3d
37nogroups
38nonewprivs
39noroot
40notv
41nou2f
42novideo
43protocol unix
44seccomp
45shell none
46tracelog
47
48disable-mnt
49private-cache
50private-bin onboard,python*,tput
51private-dev
52private-etc alternatives,dbus-1,dconf,fonts,gtk-2.0,gtk-3.0,locale,locale.alias,locale.conf,mime.types,selinux,X11,xdg
53private-tmp
54
55dbus-system none
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-03 15:33:13 +0000