aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@protonmail.com>2021-02-09 08:37:40 -0500
committerLibravatar GitHub <noreply@github.com>2021-02-09 08:37:40 -0500
commit0b818f13fd4c14e5cf6dff24e8b5078f650f374d (patch)
tree7ec845b22d07edd925e2b98bb03c10f48b1be3bb /etc/profile-m-z
parentMerge pull request #3322 from topimiettinen/filter-environment-variables (diff)
parentSome minor changes (diff)
downloadfirejail-0b818f13fd4c14e5cf6dff24e8b5078f650f374d.tar.gz
firejail-0b818f13fd4c14e5cf6dff24e8b5078f650f374d.tar.zst
firejail-0b818f13fd4c14e5cf6dff24e8b5078f650f374d.zip
Merge pull request #3849 from bbhtt/email
Email part (2)
Diffstat (limited to 'etc/profile-m-z')
-rw-r--r--etc/profile-m-z/mutt.profile88
-rw-r--r--etc/profile-m-z/neomutt.profile152
-rw-r--r--etc/profile-m-z/sylpheed.profile9
3 files changed, 249 insertions, 0 deletions
diff --git a/etc/profile-m-z/mutt.profile b/etc/profile-m-z/mutt.profile
index 1ce12f54f..24782c033 100644
--- a/etc/profile-m-z/mutt.profile
+++ b/etc/profile-m-z/mutt.profile
@@ -1,6 +1,7 @@
1# Firejail profile for mutt 1# Firejail profile for mutt
2# Description: Text-based mailreader supporting MIME, GPG, PGP and threading 2# Description: Text-based mailreader supporting MIME, GPG, PGP and threading
3# This file is overwritten after every install/update 3# This file is overwritten after every install/update
4quiet
4# Persistent local customizations 5# Persistent local customizations
5include mutt.local 6include mutt.local
6# Persistent global definitions 7# Persistent global definitions
@@ -8,15 +9,18 @@ include globals.local
8 9
9noblacklist /var/mail 10noblacklist /var/mail
10noblacklist /var/spool/mail 11noblacklist /var/spool/mail
12noblacklist ${DOCUMENTS}
11noblacklist ${HOME}/.Mail 13noblacklist ${HOME}/.Mail
12noblacklist ${HOME}/.bogofilter 14noblacklist ${HOME}/.bogofilter
13noblacklist ${HOME}/.cache/mutt 15noblacklist ${HOME}/.cache/mutt
16noblacklist ${HOME}/.config/mutt
14noblacklist ${HOME}/.config/nano 17noblacklist ${HOME}/.config/nano
15noblacklist ${HOME}/.elinks 18noblacklist ${HOME}/.elinks
16noblacklist ${HOME}/.emacs 19noblacklist ${HOME}/.emacs
17noblacklist ${HOME}/.emacs.d 20noblacklist ${HOME}/.emacs.d
18noblacklist ${HOME}/.gnupg 21noblacklist ${HOME}/.gnupg
19noblacklist ${HOME}/.mail 22noblacklist ${HOME}/.mail
23noblacklist ${HOME}/.mailcap
20noblacklist ${HOME}/.msmtprc 24noblacklist ${HOME}/.msmtprc
21noblacklist ${HOME}/.mutt 25noblacklist ${HOME}/.mutt
22noblacklist ${HOME}/.muttrc 26noblacklist ${HOME}/.muttrc
@@ -34,15 +38,84 @@ noblacklist ${HOME}/sent
34blacklist /tmp/.X11-unix 38blacklist /tmp/.X11-unix
35blacklist ${RUNUSER}/wayland-* 39blacklist ${RUNUSER}/wayland-*
36 40
41# Uncomment or put them in mutt.local for oauth.py,S/MIME
42
43#include allow-perl.inc
44#include allow-python2.inc
45#include allow-python3.inc
46
37include disable-common.inc 47include disable-common.inc
38include disable-devel.inc 48include disable-devel.inc
49include disable-exec.inc
39include disable-interpreters.inc 50include disable-interpreters.inc
40include disable-passwdmgr.inc 51include disable-passwdmgr.inc
41include disable-programs.inc 52include disable-programs.inc
53include disable-xdg.inc
42 54
55mkdir ${HOME}/.Mail
56mkdir ${HOME}/.bogofilter
57mkdir ${HOME}/.cache/mutt
58mkdir ${HOME}/.config/mutt
59mkdir ${HOME}/.config/nano
60mkdir ${HOME}/.elinks
61mkdir ${HOME}/.emacs.d
62mkdir ${HOME}/.gnupg
63mkdir ${HOME}/.mail
64mkdir ${HOME}/.mutt
65mkdir ${HOME}/.vim
66mkdir ${HOME}/.w3m
67mkdir ${HOME}/Mail
68mkdir ${HOME}/mail
69mkdir ${HOME}/postponed
70mkdir ${HOME}/sent
71mkfile ${HOME}/.emacs
72mkfile ${HOME}/.mailcap
73mkfile ${HOME}/.msmtprc
74mkfile ${HOME}/.muttrc
75mkfile ${HOME}/.nanorc
76mkfile ${HOME}/.signature
77mkfile ${HOME}/.viminfo
78mkfile ${HOME}/.vimrc
79whitelist ${DOCUMENTS}
80whitelist ${DOWNLOADS}
81whitelist ${HOME}/.Mail
82whitelist ${HOME}/.bogofilter
83whitelist ${HOME}/.cache/mutt
84whitelist ${HOME}/.config/mutt
85whitelist ${HOME}/.config/nano
86whitelist ${HOME}/.elinks
87whitelist ${HOME}/.emacs
88whitelist ${HOME}/.emacs.d
89whitelist ${HOME}/.gnupg
90whitelist ${HOME}/.mail
91whitelist ${HOME}/.mailcap
92whitelist ${HOME}/.msmtprc
93whitelist ${HOME}/.mutt
94whitelist ${HOME}/.muttrc
95whitelist ${HOME}/.nanorc
96whitelist ${HOME}/.signature
97whitelist ${HOME}/.vim
98whitelist ${HOME}/.viminfo
99whitelist ${HOME}/.vimrc
100whitelist ${HOME}/.w3m
101whitelist ${HOME}/Mail
102whitelist ${HOME}/mail
103whitelist ${HOME}/postponed
104whitelist ${HOME}/sent
105whitelist /usr/share/gnupg
106whitelist /usr/share/gnupg2
107whitelist /usr/share/mutt
108whitelist /var/mail
109whitelist /var/spool/mail
110include whitelist-common.inc
43include whitelist-runuser-common.inc 111include whitelist-runuser-common.inc
112include whitelist-usr-share-common.inc
113include whitelist-var-common.inc
44 114
115apparmor
45caps.drop all 116caps.drop all
117ipc-namespace
118machine-id
46netfilter 119netfilter
47no3d 120no3d
48nodvd 121nodvd
@@ -55,8 +128,23 @@ nou2f
55novideo 128novideo
56protocol unix,inet,inet6 129protocol unix,inet,inet6
57seccomp 130seccomp
131seccomp.block-secondary
58shell none 132shell none
133tracelog
59 134
135# disable-mnt
136private-cache
60private-dev 137private-dev
138private-etc alternatives,ca-certificates,crypto-policies,fonts,gai.conf,gcrypt,gnupg,gnutls,hostname,hosts,hosts.conf,mail,mailname,Mutt,Muttrc,Muttrc.d,nntpserver,nsswitch.conf,passwd,pki,resolv.conf,ssl,terminfo,xdg
139private-tmp
61writable-run-user 140writable-run-user
62writable-var 141writable-var
142
143dbus-user none
144dbus-system none
145
146memory-deny-write-execute
147read-only ${HOME}/.elinks
148read-only ${HOME}/.nanorc
149read-only ${HOME}/.signature
150read-only ${HOME}/.w3m
diff --git a/etc/profile-m-z/neomutt.profile b/etc/profile-m-z/neomutt.profile
new file mode 100644
index 000000000..26865b90a
--- /dev/null
+++ b/etc/profile-m-z/neomutt.profile
@@ -0,0 +1,152 @@
1# Firejail profile for neomutt
2# Description: Mutt fork with advanced features and better documentation
3# This file is overwritten after every install/update
4quiet
5# Persistent local customizations
6include neomutt.local
7# Persistent global definitions
8include globals.local
9
10noblacklist ${DOCUMENTS}
11noblacklist ${HOME}/.Mail
12noblacklist ${HOME}/.bogofilter
13noblacklist ${HOME}/.config/mutt
14noblacklist ${HOME}/.config/nano
15noblacklist ${HOME}/.config/neomutt
16noblacklist ${HOME}/.elinks
17noblacklist ${HOME}/.emacs
18noblacklist ${HOME}/.emacs.d
19noblacklist ${HOME}/.gnupg
20noblacklist ${HOME}/.mail
21noblacklist ${HOME}/.mailcap
22noblacklist ${HOME}/.msmtprc
23noblacklist ${HOME}/.mutt
24noblacklist ${HOME}/.muttrc
25noblacklist ${HOME}/.nanorc
26noblacklist ${HOME}/.neomutt
27noblacklist ${HOME}/.neomuttrc
28noblacklist ${HOME}/.signature
29noblacklist ${HOME}/.vim
30noblacklist ${HOME}/.viminfo
31noblacklist ${HOME}/.vimrc
32noblacklist ${HOME}/.w3m
33noblacklist ${HOME}/Mail
34noblacklist ${HOME}/mail
35noblacklist ${HOME}/postponed
36noblacklist ${HOME}/sent
37noblacklist /var/mail
38noblacklist /var/spool/mail
39
40blacklist /tmp/.X11-unix
41blacklist ${RUNUSER}/wayland-*
42
43include allow-lua.inc
44
45include disable-common.inc
46include disable-devel.inc
47include disable-exec.inc
48include disable-interpreters.inc
49include disable-passwdmgr.inc
50include disable-programs.inc
51include disable-xdg.inc
52
53mkdir ${HOME}/.Mail
54mkdir ${HOME}/.bogofilter
55mkdir ${HOME}/.config/mutt
56mkdir ${HOME}/.config/nano
57mkdir ${HOME}/.config/neomutt
58mkdir ${HOME}/.elinks
59mkdir ${HOME}/.emacs.d
60mkdir ${HOME}/.gnupg
61mkdir ${HOME}/.mail
62mkdir ${HOME}/.mutt
63mkdir ${HOME}/.neomutt
64mkdir ${HOME}/.vim
65mkdir ${HOME}/.w3m
66mkdir ${HOME}/Mail
67mkdir ${HOME}/mail
68mkdir ${HOME}/postponed
69mkdir ${HOME}/sent
70mkfile ${HOME}/.emacs
71mkfile ${HOME}/.mailcap
72mkfile ${HOME}/.msmtprc
73mkfile ${HOME}/.muttrc
74mkfile ${HOME}/.nanorc
75mkfile ${HOME}/.neomuttrc
76mkfile ${HOME}/.signature
77mkfile ${HOME}/.viminfo
78mkfile ${HOME}/.vimrc
79whitelist ${DOCUMENTS}
80whitelist ${DOWNLOADS}
81whitelist ${HOME}/.Mail
82whitelist ${HOME}/.bogofilter
83whitelist ${HOME}/.config/mutt
84whitelist ${HOME}/.config/nano
85whitelist ${HOME}/.config/neomutt
86whitelist ${HOME}/.elinks
87whitelist ${HOME}/.emacs
88whitelist ${HOME}/.emacs.d
89whitelist ${HOME}/.gnupg
90whitelist ${HOME}/.mail
91whitelist ${HOME}/.mailcap
92whitelist ${HOME}/.msmtprc
93whitelist ${HOME}/.mutt
94whitelist ${HOME}/.muttrc
95whitelist ${HOME}/.nanorc
96whitelist ${HOME}/.neomutt
97whitelist ${HOME}/.neomuttrc
98whitelist ${HOME}/.signature
99whitelist ${HOME}/.vim
100whitelist ${HOME}/.viminfo
101whitelist ${HOME}/.vimrc
102whitelist ${HOME}/.w3m
103whitelist ${HOME}/Mail
104whitelist ${HOME}/mail
105whitelist ${HOME}/postponed
106whitelist ${HOME}/sent
107whitelist /usr/share/gnupg
108whitelist /usr/share/gnupg2
109whitelist /usr/share/neomutt
110whitelist /var/mail
111whitelist /var/spool/mail
112include whitelist-common.inc
113include whitelist-runuser-common.inc
114include whitelist-usr-share-common.inc
115include whitelist-var-common.inc
116
117apparmor
118caps.drop all
119ipc-namespace
120machine-id
121netfilter
122no3d
123nodvd
124nogroups
125nonewprivs
126noroot
127nosound
128notv
129nou2f
130novideo
131protocol unix,inet,inet6
132seccomp
133seccomp.block-secondary
134shell none
135tracelog
136
137# disable-mnt
138private-cache
139private-dev
140private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gcrypt,gnupg,hostname,hosts,hosts.conf,mail,mailname,Mutt,Muttrc,Muttrc.d,neomuttrc,neomuttrc.d,nntpserver,nsswitch.conf,passwd,pki,resolv.conf,ssl,xdg
141private-tmp
142writable-run-user
143writable-var
144
145dbus-user none
146dbus-system none
147
148memory-deny-write-execute
149read-only ${HOME}/.elinks
150read-only ${HOME}/.nanorc
151read-only ${HOME}/.signature
152read-only ${HOME}/.w3m
diff --git a/etc/profile-m-z/sylpheed.profile b/etc/profile-m-z/sylpheed.profile
index 4344fe73a..50506d100 100644
--- a/etc/profile-m-z/sylpheed.profile
+++ b/etc/profile-m-z/sylpheed.profile
@@ -13,5 +13,14 @@ whitelist ${HOME}/.sylpheed-2.0
13 13
14whitelist /usr/share/sylpheed 14whitelist /usr/share/sylpheed
15 15
16# private-bin curl,gpg,gpg2,gpg-agent,gpgsm,pinentry,pinentry-gtk-2,sylpheed
17
18dbus-user filter
19dbus-user.talk ca.desrt.dconf
20dbus-user.talk org.freedesktop.secrets
21dbus-user.talk org.gnome.keyring.SystemPrompter
22# Uncomment below for notifications (or put them in your sylpheed.local)
23# dbus-user.talk org.freedesktop.Notifications
24
16# Redirect 25# Redirect
17include email-common.profile 26include email-common.profile
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-21 06:26:33 +0000