aboutsummaryrefslogtreecommitdiffstats
path: root/etc/wire-desktop.profile
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2020-01-26 20:06:21 +0000
committerLibravatar GitHub <noreply@github.com>2020-01-26 20:06:21 +0000
commitc921413c0ce0779cf03a6e5f1a5f831fa3a73573 (patch)
treefe9fd5f5f3559e0a51f7bb058a637781e36e5518 /etc/wire-desktop.profile
parentfix beaker.profile (diff)
downloadfirejail-c921413c0ce0779cf03a6e5f1a5f831fa3a73573.tar.gz
firejail-c921413c0ce0779cf03a6e5f1a5f831fa3a73573.tar.zst
firejail-c921413c0ce0779cf03a6e5f1a5f831fa3a73573.zip
refactor some profiles as electron redirects (#3188)
* refactor as electron redirect * refactor as electron redirect * refactor as electron redirect
Diffstat (limited to 'etc/wire-desktop.profile')
-rw-r--r--etc/wire-desktop.profile21
1 files changed, 9 insertions, 12 deletions
diff --git a/etc/wire-desktop.profile b/etc/wire-desktop.profile
index a56ecef1b..78c4b418a 100644
--- a/etc/wire-desktop.profile
+++ b/etc/wire-desktop.profile
@@ -1,36 +1,33 @@
1# Firejail profile for wire-desktop 1# Firejail profile for wire-desktop
2# Description: End-to-end encrypted messenger with file sharing, voice calls and video conferences
2# This file is overwritten after every install/update 3# This file is overwritten after every install/update
3# Persistent local customizations 4# Persistent local customizations
4include wire-desktop.local 5include wire-desktop.local
5# Persistent global definitions 6# Persistent global definitions
6include globals.local 7# added by included profile
8#include globals.local
9
10# Debian/Ubuntu use /opt/Wire. As that is not in PATH by default, run `firejail /opt/Wire/wire-desktop` to start it.
7 11
8noblacklist ${HOME}/.config/Wire 12noblacklist ${HOME}/.config/Wire
9 13
10include disable-common.inc
11include disable-devel.inc 14include disable-devel.inc
12include disable-interpreters.inc 15include disable-interpreters.inc
13include disable-passwdmgr.inc
14include disable-programs.inc
15 16
16mkdir ${HOME}/.config/Wire 17mkdir ${HOME}/.config/Wire
17whitelist ${HOME}/.config/Wire 18whitelist ${HOME}/.config/Wire
18whitelist ${DOWNLOADS}
19include whitelist-common.inc 19include whitelist-common.inc
20 20
21caps.keep sys_admin,sys_chroot 21caps.keep sys_admin,sys_chroot
22netfilter 22ignore nodbus
23nodvd
24nogroups
25notv
26nou2f 23nou2f
27shell none 24shell none
28 25
29# Note: The current version of Wire is located in /opt/wire-desktop/wire-desktop, and therefore
30# it is not in PATH. To use Wire with firejail, run "firejail /opt/wire-desktop/wire-desktop"
31
32disable-mnt 26disable-mnt
33private-bin bash,electron,electron4,env,sh,wire-desktop 27private-bin bash,electron,electron4,env,sh,wire-desktop
34private-dev 28private-dev
35private-etc alternatives,ca-certificates,crypto-policies,fonts,machine-id,pki,resolv.conf,ssl 29private-etc alternatives,ca-certificates,crypto-policies,fonts,machine-id,pki,resolv.conf,ssl
36private-tmp 30private-tmp
31
32# Redirect
33include electron.profile