summaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2015-09-24 08:03:57 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2015-09-24 08:03:57 -0400
commit4f36b7246a74ecd3c2599292677ed82d96130801 (patch)
treed3358e03f344739e60ae2b0cb67766e727d2a960 /etc
parentprofile work (diff)
downloadfirejail-4f36b7246a74ecd3c2599292677ed82d96130801.tar.gz
firejail-4f36b7246a74ecd3c2599292677ed82d96130801.tar.zst
firejail-4f36b7246a74ecd3c2599292677ed82d96130801.zip
security profile work
Diffstat (limited to 'etc')
-rw-r--r--etc/audacious.profile4
-rw-r--r--etc/clementine.profile4
-rw-r--r--etc/deadbeef.profile4
-rw-r--r--etc/deluge.profile4
-rw-r--r--etc/disable-secret.inc1
-rw-r--r--etc/dropbox.profile4
-rw-r--r--etc/evince.profile4
-rw-r--r--etc/fbreader.profile4
-rw-r--r--etc/generic.profile5
-rw-r--r--etc/gnome-mplayer.profile4
-rw-r--r--etc/qbittorrent.profile4
-rw-r--r--etc/rhythmbox.profile4
-rw-r--r--etc/totem.profile4
-rw-r--r--etc/transmission-gtk.profile4
-rw-r--r--etc/transmission-qt.profile6
-rw-r--r--etc/vlc.profile4
16 files changed, 61 insertions, 3 deletions
diff --git a/etc/audacious.profile b/etc/audacious.profile
index 923b70184..5f870c8ab 100644
--- a/etc/audacious.profile
+++ b/etc/audacious.profile
@@ -3,6 +3,10 @@ include /etc/firejail/disable-mgmt.inc
3include /etc/firejail/disable-secret.inc 3include /etc/firejail/disable-secret.inc
4include /etc/firejail/disable-common.inc 4include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-history.inc 5include /etc/firejail/disable-history.inc
6blacklist ${HOME}/.pki/nssdb
7blacklist {HOME}/.lastpass
8blacklist {HOME}/.keepassx
9blacklist {HOME}/.password-store
6caps.drop all 10caps.drop all
7seccomp 11seccomp
8noroot 12noroot
diff --git a/etc/clementine.profile b/etc/clementine.profile
index 47c40506a..b972c18ff 100644
--- a/etc/clementine.profile
+++ b/etc/clementine.profile
@@ -3,6 +3,10 @@ include /etc/firejail/disable-mgmt.inc
3include /etc/firejail/disable-secret.inc 3include /etc/firejail/disable-secret.inc
4include /etc/firejail/disable-common.inc 4include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-history.inc 5include /etc/firejail/disable-history.inc
6blacklist ${HOME}/.pki/nssdb
7blacklist {HOME}/.lastpass
8blacklist {HOME}/.keepassx
9blacklist {HOME}/.password-store
6caps.drop all 10caps.drop all
7seccomp 11seccomp
8noroot 12noroot
diff --git a/etc/deadbeef.profile b/etc/deadbeef.profile
index 68027bd7c..d25db072c 100644
--- a/etc/deadbeef.profile
+++ b/etc/deadbeef.profile
@@ -3,6 +3,10 @@ include /etc/firejail/disable-mgmt.inc
3include /etc/firejail/disable-secret.inc 3include /etc/firejail/disable-secret.inc
4include /etc/firejail/disable-common.inc 4include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-history.inc 5include /etc/firejail/disable-history.inc
6blacklist ${HOME}/.pki/nssdb
7blacklist {HOME}/.lastpass
8blacklist {HOME}/.keepassx
9blacklist {HOME}/.password-store
6caps.drop all 10caps.drop all
7seccomp 11seccomp
8noroot 12noroot
diff --git a/etc/deluge.profile b/etc/deluge.profile
index 24a082099..b54e31cfa 100644
--- a/etc/deluge.profile
+++ b/etc/deluge.profile
@@ -3,6 +3,10 @@ include /etc/firejail/disable-mgmt.inc
3include /etc/firejail/disable-secret.inc 3include /etc/firejail/disable-secret.inc
4include /etc/firejail/disable-common.inc 4include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-history.inc 5include /etc/firejail/disable-history.inc
6blacklist ${HOME}/.pki/nssdb
7blacklist {HOME}/.lastpass
8blacklist {HOME}/.keepassx
9blacklist {HOME}/.password-store
6caps.drop all 10caps.drop all
7seccomp 11seccomp
8netfilter 12netfilter
diff --git a/etc/disable-secret.inc b/etc/disable-secret.inc
index 8ac1b3792..1042582a0 100644
--- a/etc/disable-secret.inc
+++ b/etc/disable-secret.inc
@@ -4,6 +4,5 @@ tmpfs ${HOME}/.gnome2_private
4blacklist ${HOME}/.gnome2/keyrings 4blacklist ${HOME}/.gnome2/keyrings
5blacklist ${HOME}/kde4/share/apps/kwallet 5blacklist ${HOME}/kde4/share/apps/kwallet
6blacklist ${HOME}/kde/share/apps/kwallet 6blacklist ${HOME}/kde/share/apps/kwallet
7blacklist ${HOME}/.pki/nssdb
8blacklist ${HOME}/.gnupg 7blacklist ${HOME}/.gnupg
9blacklist ${HOME}/.local/share/recently-used.xbel 8blacklist ${HOME}/.local/share/recently-used.xbel
diff --git a/etc/dropbox.profile b/etc/dropbox.profile
index 008660f77..76723eb38 100644
--- a/etc/dropbox.profile
+++ b/etc/dropbox.profile
@@ -3,6 +3,10 @@ include /etc/firejail/disable-mgmt.inc
3include /etc/firejail/disable-secret.inc 3include /etc/firejail/disable-secret.inc
4include /etc/firejail/disable-common.inc 4include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-history.inc 5include /etc/firejail/disable-history.inc
6blacklist ${HOME}/.pki/nssdb
7blacklist {HOME}/.lastpass
8blacklist {HOME}/.keepassx
9blacklist {HOME}/.password-store
6caps 10caps
7seccomp 11seccomp
8noroot 12noroot
diff --git a/etc/evince.profile b/etc/evince.profile
index 023fd2444..a79c4cf54 100644
--- a/etc/evince.profile
+++ b/etc/evince.profile
@@ -3,6 +3,10 @@ include /etc/firejail/disable-mgmt.inc
3include /etc/firejail/disable-secret.inc 3include /etc/firejail/disable-secret.inc
4include /etc/firejail/disable-common.inc 4include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-history.inc 5include /etc/firejail/disable-history.inc
6blacklist ${HOME}/.pki/nssdb
7blacklist {HOME}/.lastpass
8blacklist {HOME}/.keepassx
9blacklist {HOME}/.password-store
6caps.drop all 10caps.drop all
7seccomp 11seccomp
8noroot 12noroot
diff --git a/etc/fbreader.profile b/etc/fbreader.profile
index 97baa2a3e..bf707d8ca 100644
--- a/etc/fbreader.profile
+++ b/etc/fbreader.profile
@@ -4,6 +4,10 @@ include /etc/firejail/disable-mgmt.inc
4include /etc/firejail/disable-secret.inc 4include /etc/firejail/disable-secret.inc
5include /etc/firejail/disable-common.inc 5include /etc/firejail/disable-common.inc
6include /etc/firejail/disable-history.inc 6include /etc/firejail/disable-history.inc
7blacklist ${HOME}/.pki/nssdb
8blacklist {HOME}/.lastpass
9blacklist {HOME}/.keepassx
10blacklist {HOME}/.password-store
7caps.drop all 11caps.drop all
8seccomp 12seccomp
9netfilter 13netfilter
diff --git a/etc/generic.profile b/etc/generic.profile
index f1c6af30d..c5dfb7929 100644
--- a/etc/generic.profile
+++ b/etc/generic.profile
@@ -5,7 +5,10 @@ include /etc/firejail/disable-mgmt.inc
5include /etc/firejail/disable-secret.inc 5include /etc/firejail/disable-secret.inc
6include /etc/firejail/disable-common.inc 6include /etc/firejail/disable-common.inc
7include /etc/firejail/disable-history.inc 7include /etc/firejail/disable-history.inc
8 8blacklist ${HOME}/.pki/nssdb
9blacklist {HOME}/.lastpass
10blacklist {HOME}/.keepassx
11blacklist {HOME}/.password-store
9caps.drop all 12caps.drop all
10seccomp 13seccomp
11netfilter 14netfilter
diff --git a/etc/gnome-mplayer.profile b/etc/gnome-mplayer.profile
index 4be1c1093..201af5007 100644
--- a/etc/gnome-mplayer.profile
+++ b/etc/gnome-mplayer.profile
@@ -3,6 +3,10 @@ include /etc/firejail/disable-mgmt.inc
3include /etc/firejail/disable-secret.inc 3include /etc/firejail/disable-secret.inc
4include /etc/firejail/disable-common.inc 4include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-history.inc 5include /etc/firejail/disable-history.inc
6blacklist ${HOME}/.pki/nssdb
7blacklist {HOME}/.lastpass
8blacklist {HOME}/.keepassx
9blacklist {HOME}/.password-store
6caps.drop all 10caps.drop all
7seccomp 11seccomp
8noroot 12noroot
diff --git a/etc/qbittorrent.profile b/etc/qbittorrent.profile
index dd7be997c..b4c2c91c7 100644
--- a/etc/qbittorrent.profile
+++ b/etc/qbittorrent.profile
@@ -3,6 +3,10 @@ include /etc/firejail/disable-mgmt.inc
3include /etc/firejail/disable-secret.inc 3include /etc/firejail/disable-secret.inc
4include /etc/firejail/disable-common.inc 4include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-history.inc 5include /etc/firejail/disable-history.inc
6blacklist ${HOME}/.pki/nssdb
7blacklist {HOME}/.lastpass
8blacklist {HOME}/.keepassx
9blacklist {HOME}/.password-store
6caps.drop all 10caps.drop all
7seccomp 11seccomp
8netfilter 12netfilter
diff --git a/etc/rhythmbox.profile b/etc/rhythmbox.profile
index f2870d543..e2cd0ef71 100644
--- a/etc/rhythmbox.profile
+++ b/etc/rhythmbox.profile
@@ -3,6 +3,10 @@ include /etc/firejail/disable-mgmt.inc
3include /etc/firejail/disable-secret.inc 3include /etc/firejail/disable-secret.inc
4include /etc/firejail/disable-common.inc 4include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-history.inc 5include /etc/firejail/disable-history.inc
6blacklist ${HOME}/.pki/nssdb
7blacklist {HOME}/.lastpass
8blacklist {HOME}/.keepassx
9blacklist {HOME}/.password-store
6caps.drop all 10caps.drop all
7seccomp 11seccomp
8noroot 12noroot
diff --git a/etc/totem.profile b/etc/totem.profile
index 6b26a4e0e..a6e26dbdb 100644
--- a/etc/totem.profile
+++ b/etc/totem.profile
@@ -3,6 +3,10 @@ include /etc/firejail/disable-mgmt.inc
3include /etc/firejail/disable-secret.inc 3include /etc/firejail/disable-secret.inc
4include /etc/firejail/disable-common.inc 4include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-history.inc 5include /etc/firejail/disable-history.inc
6blacklist ${HOME}/.pki/nssdb
7blacklist {HOME}/.lastpass
8blacklist {HOME}/.keepassx
9blacklist {HOME}/.password-store
6caps.drop all 10caps.drop all
7seccomp 11seccomp
8noroot 12noroot
diff --git a/etc/transmission-gtk.profile b/etc/transmission-gtk.profile
index dc1d9d524..525ee1785 100644
--- a/etc/transmission-gtk.profile
+++ b/etc/transmission-gtk.profile
@@ -3,6 +3,10 @@ include /etc/firejail/disable-mgmt.inc
3include /etc/firejail/disable-secret.inc 3include /etc/firejail/disable-secret.inc
4include /etc/firejail/disable-common.inc 4include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-history.inc 5include /etc/firejail/disable-history.inc
6blacklist ${HOME}/.pki/nssdb
7blacklist {HOME}/.lastpass
8blacklist {HOME}/.keepassx
9blacklist {HOME}/.password-store
6caps.drop all 10caps.drop all
7seccomp 11seccomp
8netfilter 12netfilter
diff --git a/etc/transmission-qt.profile b/etc/transmission-qt.profile
index 64c2ba8ad..9857ac712 100644
--- a/etc/transmission-qt.profile
+++ b/etc/transmission-qt.profile
@@ -3,7 +3,11 @@ include /etc/firejail/disable-mgmt.inc
3include /etc/firejail/disable-secret.inc 3include /etc/firejail/disable-secret.inc
4include /etc/firejail/disable-common.inc 4include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-history.inc 5include /etc/firejail/disable-history.inc
6caps.drop all 6cblacklist ${HOME}/.pki/nssdb
7blacklist {HOME}/.lastpass
8blacklist {HOME}/.keepassx
9blacklist {HOME}/.password-store
10aps.drop all
7seccomp 11seccomp
8netfilter 12netfilter
9noroot 13noroot
diff --git a/etc/vlc.profile b/etc/vlc.profile
index 365ea838a..ef687abb7 100644
--- a/etc/vlc.profile
+++ b/etc/vlc.profile
@@ -3,6 +3,10 @@ include /etc/firejail/disable-mgmt.inc
3include /etc/firejail/disable-secret.inc 3include /etc/firejail/disable-secret.inc
4include /etc/firejail/disable-common.inc 4include /etc/firejail/disable-common.inc
5include /etc/firejail/disable-history.inc 5include /etc/firejail/disable-history.inc
6blacklist ${HOME}/.pki/nssdb
7blacklist {HOME}/.lastpass
8blacklist {HOME}/.keepassx
9blacklist {HOME}/.password-store
6caps.drop all 10caps.drop all
7seccomp 11seccomp
8noroot 12noroot