diff options
author | 2024-05-20 05:06:41 +0000 | |
---|---|---|
committer | 2024-05-20 05:06:41 +0000 | |
commit | ea104190df032d58ef564313fb97d5298104ec15 (patch) | |
tree | 3e27178b9d85e7123a2eae2aaf01464bc3f50e7d /etc/profile-m-z | |
parent | profiles: yelp: add Firefox URL open support (#6349) (diff) | |
download | firejail-ea104190df032d58ef564313fb97d5298104ec15.tar.gz firejail-ea104190df032d58ef564313fb97d5298104ec15.tar.zst firejail-ea104190df032d58ef564313fb97d5298104ec15.zip |
profiles: streamline Firefox URL opening support (#6348)
Changes:
* Improve Firefox D-Bus comment
* Add missing/standardize related comments
* Include allow-bin-sh.inc in relevant profiles
* Use Firefox URL open section in relevant profiles
Diffstat (limited to 'etc/profile-m-z')
-rw-r--r-- | etc/profile-m-z/signal-desktop.profile | 5 | ||||
-rw-r--r-- | etc/profile-m-z/thunderbird.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/trojita.profile | 5 | ||||
-rw-r--r-- | etc/profile-m-z/tutanota-desktop.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/zeal.profile | 11 |
5 files changed, 18 insertions, 7 deletions
diff --git a/etc/profile-m-z/signal-desktop.profile b/etc/profile-m-z/signal-desktop.profile index 8cb4e4173..d1db0ba86 100644 --- a/etc/profile-m-z/signal-desktop.profile +++ b/etc/profile-m-z/signal-desktop.profile | |||
@@ -5,6 +5,9 @@ include signal-desktop.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include globals.local | 6 | include globals.local |
7 | 7 | ||
8 | # sh is needed to allow Firefox to open links | ||
9 | include allow-bin-sh.inc | ||
10 | |||
8 | ignore novideo | 11 | ignore novideo |
9 | 12 | ||
10 | ignore noexec /tmp | 13 | ignore noexec /tmp |
@@ -25,7 +28,7 @@ private-etc @tls-ca | |||
25 | dbus-user filter | 28 | dbus-user filter |
26 | # allow D-Bus notifications | 29 | # allow D-Bus notifications |
27 | dbus-user.talk org.freedesktop.Notifications | 30 | dbus-user.talk org.freedesktop.Notifications |
28 | # allow D-Bus communication with firefox for opening links | 31 | # Allow D-Bus communication with Firefox for opening links |
29 | dbus-user.talk org.mozilla.* | 32 | dbus-user.talk org.mozilla.* |
30 | 33 | ||
31 | ignore dbus-user none | 34 | ignore dbus-user none |
diff --git a/etc/profile-m-z/thunderbird.profile b/etc/profile-m-z/thunderbird.profile index 979971ac2..fda32d038 100644 --- a/etc/profile-m-z/thunderbird.profile +++ b/etc/profile-m-z/thunderbird.profile | |||
@@ -15,7 +15,7 @@ dbus-user filter | |||
15 | dbus-user.own org.mozilla.thunderbird.* | 15 | dbus-user.own org.mozilla.thunderbird.* |
16 | dbus-user.talk ca.desrt.dconf | 16 | dbus-user.talk ca.desrt.dconf |
17 | dbus-user.talk org.freedesktop.Notifications | 17 | dbus-user.talk org.freedesktop.Notifications |
18 | # allow D-Bus communication with firefox for opening links | 18 | # Allow D-Bus communication with Firefox for opening links |
19 | dbus-user.talk org.mozilla.* | 19 | dbus-user.talk org.mozilla.* |
20 | # e2ee email needs writable-run-user | 20 | # e2ee email needs writable-run-user |
21 | # https://support.mozilla.org/en-US/kb/introduction-to-e2e-encryption | 21 | # https://support.mozilla.org/en-US/kb/introduction-to-e2e-encryption |
diff --git a/etc/profile-m-z/trojita.profile b/etc/profile-m-z/trojita.profile index 5e9e7f127..dc0f5b906 100644 --- a/etc/profile-m-z/trojita.profile +++ b/etc/profile-m-z/trojita.profile | |||
@@ -10,6 +10,9 @@ noblacklist ${HOME}/.abook | |||
10 | noblacklist ${HOME}/.cache/flaska.net/trojita | 10 | noblacklist ${HOME}/.cache/flaska.net/trojita |
11 | noblacklist ${HOME}/.config/flaska.net | 11 | noblacklist ${HOME}/.config/flaska.net |
12 | 12 | ||
13 | # sh is needed to allow Firefox to open links | ||
14 | include allow-bin-sh.inc | ||
15 | |||
13 | include disable-common.inc | 16 | include disable-common.inc |
14 | include disable-devel.inc | 17 | include disable-devel.inc |
15 | include disable-exec.inc | 18 | include disable-exec.inc |
@@ -61,7 +64,7 @@ private-tmp | |||
61 | 64 | ||
62 | dbus-user filter | 65 | dbus-user filter |
63 | dbus-user.talk org.freedesktop.secrets | 66 | dbus-user.talk org.freedesktop.secrets |
64 | # allow D-Bus communication with firefox for opening links | 67 | # Allow D-Bus communication with Firefox for opening links |
65 | dbus-user.talk org.mozilla.* | 68 | dbus-user.talk org.mozilla.* |
66 | dbus-system none | 69 | dbus-system none |
67 | 70 | ||
diff --git a/etc/profile-m-z/tutanota-desktop.profile b/etc/profile-m-z/tutanota-desktop.profile index f0a0cacaf..6c6de108b 100644 --- a/etc/profile-m-z/tutanota-desktop.profile +++ b/etc/profile-m-z/tutanota-desktop.profile | |||
@@ -40,7 +40,7 @@ dbus-user filter | |||
40 | dbus-user.talk org.freedesktop.Notifications | 40 | dbus-user.talk org.freedesktop.Notifications |
41 | dbus-user.talk org.freedesktop.secrets | 41 | dbus-user.talk org.freedesktop.secrets |
42 | dbus-user.talk org.gnome.keyring.SystemPrompter | 42 | dbus-user.talk org.gnome.keyring.SystemPrompter |
43 | # allow D-Bus communication with firefox for opening links | 43 | # Allow D-Bus communication with Firefox for opening links |
44 | dbus-user.talk org.mozilla.* | 44 | dbus-user.talk org.mozilla.* |
45 | 45 | ||
46 | # Redirect | 46 | # Redirect |
diff --git a/etc/profile-m-z/zeal.profile b/etc/profile-m-z/zeal.profile index d576dbefd..f862bfce0 100644 --- a/etc/profile-m-z/zeal.profile +++ b/etc/profile-m-z/zeal.profile | |||
@@ -10,6 +10,9 @@ noblacklist ${HOME}/.cache/Zeal | |||
10 | noblacklist ${HOME}/.config/Zeal | 10 | noblacklist ${HOME}/.config/Zeal |
11 | noblacklist ${HOME}/.local/share/Zeal | 11 | noblacklist ${HOME}/.local/share/Zeal |
12 | 12 | ||
13 | # sh is needed to allow Firefox to open links | ||
14 | include allow-bin-sh.inc | ||
15 | |||
13 | include disable-common.inc | 16 | include disable-common.inc |
14 | include disable-devel.inc | 17 | include disable-devel.inc |
15 | include disable-exec.inc | 18 | include disable-exec.inc |
@@ -19,8 +22,9 @@ include disable-programs.inc | |||
19 | include disable-shell.inc | 22 | include disable-shell.inc |
20 | include disable-xdg.inc | 23 | include disable-xdg.inc |
21 | 24 | ||
22 | # Allow zeal to open links in Firefox browsers. | 25 | # The lines below are needed to find the default Firefox profile name, to allow |
23 | # This also requires dbus-user filtering (see below). | 26 | # opening links in an existing instance of Firefox (note that it still fails if |
27 | # there isn't a Firefox instance running with the default profile; see #5352) | ||
24 | noblacklist ${HOME}/.mozilla | 28 | noblacklist ${HOME}/.mozilla |
25 | whitelist ${HOME}/.mozilla/firefox/profiles.ini | 29 | whitelist ${HOME}/.mozilla/firefox/profiles.ini |
26 | 30 | ||
@@ -63,8 +67,9 @@ private-etc @tls-ca,@x11,host.conf,mime.types,rpc,services | |||
63 | private-tmp | 67 | private-tmp |
64 | 68 | ||
65 | dbus-user filter | 69 | dbus-user filter |
66 | dbus-user.talk org.mozilla.* | ||
67 | ?ALLOW_TRAY: dbus-user.talk org.kde.StatusNotifierWatcher | 70 | ?ALLOW_TRAY: dbus-user.talk org.kde.StatusNotifierWatcher |
71 | # Allow D-Bus communication with Firefox for opening links | ||
72 | dbus-user.talk org.mozilla.* | ||
68 | dbus-system none | 73 | dbus-system none |
69 | 74 | ||
70 | #memory-deny-write-execute # breaks on Arch | 75 | #memory-deny-write-execute # breaks on Arch |