aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
diff options
context:
space:
mode:
authorLibravatar kortewegdevries <kortewegdevries@protonmail.ch>2020-09-02 10:49:32 +0000
committerLibravatar GitHub <noreply@github.com>2020-09-02 10:49:32 +0000
commitc542881105c2126f7665b2e6ffbccc50045bddf2 (patch)
tree60dfbb2c99bd92e9104d009e4f8f831203791b03 /etc/profile-m-z
parentFix private-etc of electron-mail, fix geary,minitube (#3588) (diff)
downloadfirejail-c542881105c2126f7665b2e6ffbccc50045bddf2.tar.gz
firejail-c542881105c2126f7665b2e6ffbccc50045bddf2.tar.zst
firejail-c542881105c2126f7665b2e6ffbccc50045bddf2.zip
New profile for man,psi,smuxi; fix pidgin (#3590)
* Profile for Psi * Fix pidgin buddy icon * Profile for man * Add profile for smuxi * Comment man in firecfg * Add pinentry programs * Update etc/profile-m-z/psi.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
Diffstat (limited to 'etc/profile-m-z')
-rw-r--r--etc/profile-m-z/man.profile66
-rw-r--r--etc/profile-m-z/pidgin.profile2
-rw-r--r--etc/profile-m-z/psi.profile78
-rw-r--r--etc/profile-m-z/smuxi-frontend-gnome.profile55
4 files changed, 201 insertions, 0 deletions
diff --git a/etc/profile-m-z/man.profile b/etc/profile-m-z/man.profile
new file mode 100644
index 000000000..c62d797ea
--- /dev/null
+++ b/etc/profile-m-z/man.profile
@@ -0,0 +1,66 @@
1# Firejail profile for man
2# Description: manpage viewer
3quiet
4# This file is overwritten after every install/update
5# Persistent local customizations
6include man.local
7# Persistent global definitions
8include globals.local
9
10blacklist ${RUNUSER}
11
12noblacklist ${HOME}/.local/share/man
13
14include disable-common.inc
15include disable-devel.inc
16include disable-exec.inc
17include disable-interpreters.inc
18include disable-passwdmgr.inc
19include disable-programs.inc
20include disable-xdg.inc
21
22mkdir ${HOME}/.local/share/man
23whitelist ${HOME}/.local/share/man
24whitelist ${HOME}/.manpath
25whitelist /usr/share/groff
26whitelist /usr/share/info
27whitelist /usr/share/lintian
28whitelist /usr/share/locale
29whitelist /usr/share/man
30whitelist /var/cache/man
31include whitelist-common.inc
32include whitelist-usr-share-common.inc
33include whitelist-var-common.inc
34
35apparmor
36caps.drop all
37ipc-namespace
38machine-id
39net none
40no3d
41nodvd
42nogroups
43nonewprivs
44noroot
45nosound
46notv
47novideo
48nou2f
49protocol unix
50seccomp
51shell none
52tracelog
53x11 none
54
55disable-mnt
56private-bin apropos,bash,cat,catman,col,gpreconv,groff,grotty,gunzip,gzip,less,man,most,nroff,preconv,sed,sh,tbl,tr,troff,whatis,which,xtotroff,
57zcat,zsoelim
58private-cache
59private-dev
60private-etc alternatives,fonts,locale,locale.alias,locale.conf,man_db.conf,manpath.config,selinux,sysless,xdg
61private-tmp
62
63dbus-user none
64dbus-system none
65
66memory-deny-write-execute
diff --git a/etc/profile-m-z/pidgin.profile b/etc/profile-m-z/pidgin.profile
index 2e4215744..e81e78ca7 100644
--- a/etc/profile-m-z/pidgin.profile
+++ b/etc/profile-m-z/pidgin.profile
@@ -21,6 +21,8 @@ include disable-xdg.inc
21 21
22mkdir ${HOME}/.purple 22mkdir ${HOME}/.purple
23whitelist ${HOME}/.purple 23whitelist ${HOME}/.purple
24whitelist ${DOWNLOADS}
25whitelist ${PICTURES}
24include whitelist-common.inc 26include whitelist-common.inc
25include whitelist-usr-share-common.inc 27include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 28include whitelist-var-common.inc
diff --git a/etc/profile-m-z/psi.profile b/etc/profile-m-z/psi.profile
new file mode 100644
index 000000000..d3112ae95
--- /dev/null
+++ b/etc/profile-m-z/psi.profile
@@ -0,0 +1,78 @@
1# Firejail profile for psi
2# Description: Native XMPP client with GPG support
3# This file is overwritten after every install/update
4# Persistent local customizations
5include psi.local
6# Persistent global definitions
7include globals.local
8
9# Uncomment for GPG
10# noblacklist ${HOME}/.gnupg
11noblacklist ${HOME}/.cache/psi
12noblacklist ${HOME}/.cache/Psi
13noblacklist ${HOME}/.config/psi
14noblacklist ${HOME}/.local/share/psi
15noblacklist ${HOME}/.local/share/Psi
16
17include disable-common.inc
18include disable-devel.inc
19include disable-exec.inc
20include disable-interpreters.inc
21include disable-passwdmgr.inc
22include disable-programs.inc
23include disable-shell.inc
24include disable-xdg.inc
25
26# Uncomment for GPG
27# mkdir ${HOME}/.gnupg
28mkdir ${HOME}/.cache/psi
29mkdir ${HOME}/.cache/Psi
30mkdir ${HOME}/.config/psi
31mkdir ${HOME}/.local/share/psi
32mkdir ${HOME}/.local/share/Psi
33# Uncomment for GPG
34# whitelist ${HOME}/.gnupg
35whitelist ${HOME}/.cache/psi
36whitelist ${HOME}/.cache/Psi
37whitelist ${HOME}/.config/psi
38whitelist ${HOME}/.local/share/psi
39whitelist ${HOME}/.local/share/Psi
40whitelist ${DOWNLOADS}
41# Uncomment for GPG
42# whitelist /usr/share/gnupg
43# whitelist /usr/share/gnupg2
44whitelist /usr/share/psi
45# Uncomment for GPG
46# whitelist ${RUNUSER}/gnupg
47# whitelist ${RUNUSER}/keyring
48include whitelist-common.inc
49include whitelist-runuser-common.inc
50include whitelist-usr-share-common.inc
51include whitelist-var-common.inc
52
53apparmor
54caps.drop all
55netfilter
56nodvd
57nogroups
58nonewprivs
59noroot
60notv
61novideo
62nou2f
63protocol unix,inet,inet6,netlink
64seccomp !chroot
65shell none
66# breaks on Arch
67# tracelog
68
69disable-mnt
70# Add "gpg,gpg2,gpg-agent,pinentry-curses,pinentry-emacs,pinentry-fltk,pinentry-gnome3,pinentry-gtk,pinentry-gtk2,pinentry-gtk-2,pinentry-qt,pinentry-qt4,pinentry-tty,pinentry-x2go,pinentry-kwallet" for GPG
71private-bin getopt,psi
72private-cache
73private-dev
74private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,drirc,fonts,gcrypt,group,hostname,hosts,ld.so.cache,ld.so.conf,machine-id,passwd,pki,pulse,resolv.conf,selinux,ssl,xdg
75private-tmp
76
77dbus-user none
78dbus-system none
diff --git a/etc/profile-m-z/smuxi-frontend-gnome.profile b/etc/profile-m-z/smuxi-frontend-gnome.profile
new file mode 100644
index 000000000..541e5a1c4
--- /dev/null
+++ b/etc/profile-m-z/smuxi-frontend-gnome.profile
@@ -0,0 +1,55 @@
1# Firejail profile for smuxi-frontend-gnome
2# Description: Multi protocol chat client with Twitter support
3# This file is overwritten after every install/update
4# Persistent local customizations
5include smuxi-frontend-gnome.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.cache/smuxi
10noblacklist ${HOME}/.config/smuxi
11noblacklist ${HOME}/.local/share/smuxi
12
13include disable-common.inc
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19include disable-xdg.inc
20
21mkdir ${HOME}/.cache/smuxi
22mkdir ${HOME}/.config/smuxi
23mkdir ${HOME}/.local/share/smuxi
24whitelist ${HOME}/.cache/smuxi
25whitelist ${HOME}/.config/smuxi
26whitelist ${HOME}/.local/share/smuxi
27whitelist ${DOWNLOADS}
28include whitelist-common.inc
29include whitelist-runuser-common.inc
30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc
32
33apparmor
34caps.drop all
35netfilter
36nodvd
37nogroups
38nonewprivs
39noroot
40notv
41nou2f
42protocol unix,inet,inet6,netlink
43seccomp
44shell none
45tracelog
46
47disable-mnt
48private-bin bash,mono,mono-sgen,sh,smuxi-frontend-gnome
49private-cache
50private-dev
51private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,hostname,hosts,ld.so.cache,ld.so.conf,machine-id,mono,passwd,pki,pulse,resolv.conf,selinux,ssl,xdg
52private-tmp
53
54dbus-user none
55dbus-system none
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-03 21:14:05 +0000