diff options
author | 2019-04-07 21:19:49 -0400 | |
---|---|---|
committer | 2019-04-07 21:19:49 -0400 | |
commit | d2e7377e89412df02d8f8e62ad8d7c28ec861aed (patch) | |
tree | b76097ebb285979e5923f74a90986e19c4524f3d /etc | |
parent | Add note about firejail-profiles to issues instructions (diff) | |
download | firejail-d2e7377e89412df02d8f8e62ad8d7c28ec861aed.tar.gz firejail-d2e7377e89412df02d8f8e62ad8d7c28ec861aed.tar.zst firejail-d2e7377e89412df02d8f8e62ad8d7c28ec861aed.zip |
adding disable-exec.inc to more profiles
Diffstat (limited to 'etc')
-rw-r--r-- | etc/0ad.profile | 3 | ||||
-rw-r--r-- | etc/2048-qt.profile | 4 | ||||
-rw-r--r-- | etc/calibre.profile | 4 | ||||
-rw-r--r-- | etc/cherrytree.profile | 3 | ||||
-rw-r--r-- | etc/eom.profile | 3 | ||||
-rw-r--r-- | etc/evince.profile | 3 | ||||
-rw-r--r-- | etc/gnome-chess.profile | 4 | ||||
-rw-r--r-- | etc/gnome-contacts.profile | 3 | ||||
-rw-r--r-- | etc/hexchat.profile | 3 | ||||
-rw-r--r-- | etc/leafpad.profile | 3 | ||||
-rw-r--r-- | etc/mousepad.profile | 1 | ||||
-rw-r--r-- | etc/ping.profile | 3 | ||||
-rw-r--r-- | etc/pinta.profile | 3 | ||||
-rw-r--r-- | etc/sol.profile | 3 | ||||
-rw-r--r-- | etc/virtualbox.profile | 1 | ||||
-rw-r--r-- | etc/warzone2100.profile | 1 | ||||
-rw-r--r-- | etc/wget.profile | 3 | ||||
-rw-r--r-- | etc/xcalc.profile | 3 |
18 files changed, 18 insertions, 33 deletions
diff --git a/etc/0ad.profile b/etc/0ad.profile index 674fb2c6a..88c9c453b 100644 --- a/etc/0ad.profile +++ b/etc/0ad.profile | |||
@@ -12,6 +12,7 @@ noblacklist ${HOME}/.local/share/0ad | |||
12 | 12 | ||
13 | include disable-common.inc | 13 | include disable-common.inc |
14 | include disable-devel.inc | 14 | include disable-devel.inc |
15 | include disable-exec.inc | ||
15 | include disable-interpreters.inc | 16 | include disable-interpreters.inc |
16 | include disable-passwdmgr.inc | 17 | include disable-passwdmgr.inc |
17 | include disable-programs.inc | 18 | include disable-programs.inc |
@@ -44,5 +45,3 @@ private-bin 0ad,pyrogenesis,sh,which | |||
44 | private-dev | 45 | private-dev |
45 | private-tmp | 46 | private-tmp |
46 | 47 | ||
47 | noexec ${HOME} | ||
48 | noexec /tmp | ||
diff --git a/etc/2048-qt.profile b/etc/2048-qt.profile index 10f354f19..2347039a6 100644 --- a/etc/2048-qt.profile +++ b/etc/2048-qt.profile | |||
@@ -11,6 +11,7 @@ noblacklist ${HOME}/.config/xiaoyong | |||
11 | 11 | ||
12 | include disable-common.inc | 12 | include disable-common.inc |
13 | include disable-devel.inc | 13 | include disable-devel.inc |
14 | include disable-exec.inc | ||
14 | include disable-interpreters.inc | 15 | include disable-interpreters.inc |
15 | include disable-passwdmgr.inc | 16 | include disable-passwdmgr.inc |
16 | include disable-programs.inc | 17 | include disable-programs.inc |
@@ -39,6 +40,3 @@ shell none | |||
39 | disable-mnt | 40 | disable-mnt |
40 | private-dev | 41 | private-dev |
41 | private-tmp | 42 | private-tmp |
42 | |||
43 | noexec ${HOME} | ||
44 | noexec /tmp | ||
diff --git a/etc/calibre.profile b/etc/calibre.profile index 5c7d3e1e7..363e9191d 100644 --- a/etc/calibre.profile +++ b/etc/calibre.profile | |||
@@ -12,6 +12,7 @@ noblacklist ${DOCUMENTS} | |||
12 | 12 | ||
13 | include disable-common.inc | 13 | include disable-common.inc |
14 | include disable-devel.inc | 14 | include disable-devel.inc |
15 | include disable-exec.inc | ||
15 | include disable-passwdmgr.inc | 16 | include disable-passwdmgr.inc |
16 | include disable-programs.inc | 17 | include disable-programs.inc |
17 | include disable-xdg.inc | 18 | include disable-xdg.inc |
@@ -36,6 +37,3 @@ tracelog | |||
36 | 37 | ||
37 | private-dev | 38 | private-dev |
38 | private-tmp | 39 | private-tmp |
39 | |||
40 | noexec ${HOME} | ||
41 | noexec /tmp | ||
diff --git a/etc/cherrytree.profile b/etc/cherrytree.profile index 22bda418a..44ef12aa2 100644 --- a/etc/cherrytree.profile +++ b/etc/cherrytree.profile | |||
@@ -19,6 +19,7 @@ noblacklist /usr/local/lib/python3* | |||
19 | 19 | ||
20 | include disable-common.inc | 20 | include disable-common.inc |
21 | include disable-devel.inc | 21 | include disable-devel.inc |
22 | include disable-exec.inc | ||
22 | include disable-interpreters.inc | 23 | include disable-interpreters.inc |
23 | include disable-passwdmgr.inc | 24 | include disable-passwdmgr.inc |
24 | include disable-programs.inc | 25 | include disable-programs.inc |
@@ -44,5 +45,3 @@ private-cache | |||
44 | private-dev | 45 | private-dev |
45 | private-tmp | 46 | private-tmp |
46 | 47 | ||
47 | noexec ${HOME} | ||
48 | noexec /tmp | ||
diff --git a/etc/eom.profile b/etc/eom.profile index a6007f99c..745e650aa 100644 --- a/etc/eom.profile +++ b/etc/eom.profile | |||
@@ -13,6 +13,7 @@ noblacklist ${HOME}/.steam | |||
13 | 13 | ||
14 | include disable-common.inc | 14 | include disable-common.inc |
15 | include disable-devel.inc | 15 | include disable-devel.inc |
16 | include disable-exec.inc | ||
16 | include disable-interpreters.inc | 17 | include disable-interpreters.inc |
17 | include disable-passwdmgr.inc | 18 | include disable-passwdmgr.inc |
18 | include disable-programs.inc | 19 | include disable-programs.inc |
@@ -43,5 +44,3 @@ private-lib | |||
43 | private-tmp | 44 | private-tmp |
44 | 45 | ||
45 | #memory-deny-write-execute - breaks on Arch | 46 | #memory-deny-write-execute - breaks on Arch |
46 | noexec ${HOME} | ||
47 | noexec /tmp | ||
diff --git a/etc/evince.profile b/etc/evince.profile index 27b59506b..b1f984784 100644 --- a/etc/evince.profile +++ b/etc/evince.profile | |||
@@ -11,6 +11,7 @@ noblacklist ${DOCUMENTS} | |||
11 | 11 | ||
12 | include disable-common.inc | 12 | include disable-common.inc |
13 | include disable-devel.inc | 13 | include disable-devel.inc |
14 | include disable-exec.inc | ||
14 | include disable-interpreters.inc | 15 | include disable-interpreters.inc |
15 | include disable-passwdmgr.inc | 16 | include disable-passwdmgr.inc |
16 | include disable-programs.inc | 17 | include disable-programs.inc |
@@ -46,5 +47,3 @@ private-lib evince,gdk-pixbuf-2.*,gio,gvfs/libgvfscommon.so,libdjvulibre.so.*,li | |||
46 | private-tmp | 47 | private-tmp |
47 | 48 | ||
48 | # memory-deny-write-execute - might break application (https://github.com/netblue30/firejail/issues/1803) | 49 | # memory-deny-write-execute - might break application (https://github.com/netblue30/firejail/issues/1803) |
49 | noexec ${HOME} | ||
50 | noexec /tmp | ||
diff --git a/etc/gnome-chess.profile b/etc/gnome-chess.profile index dc5b62428..ed159fc82 100644 --- a/etc/gnome-chess.profile +++ b/etc/gnome-chess.profile | |||
@@ -10,6 +10,7 @@ noblacklist ${HOME}/.local/share/gnome-chess | |||
10 | 10 | ||
11 | include disable-common.inc | 11 | include disable-common.inc |
12 | include disable-devel.inc | 12 | include disable-devel.inc |
13 | include disable-exec.iinc | ||
13 | include disable-interpreters.inc | 14 | include disable-interpreters.inc |
14 | include disable-passwdmgr.inc | 15 | include disable-passwdmgr.inc |
15 | include disable-programs.inc | 16 | include disable-programs.inc |
@@ -37,6 +38,3 @@ private-bin fairymax,gnome-chess,hoichess,gnuchess | |||
37 | private-dev | 38 | private-dev |
38 | private-etc alternatives,fonts,gnome-chess | 39 | private-etc alternatives,fonts,gnome-chess |
39 | private-tmp | 40 | private-tmp |
40 | |||
41 | noexec ${HOME} | ||
42 | noexec /tmp | ||
diff --git a/etc/gnome-contacts.profile b/etc/gnome-contacts.profile index 2a13b3b27..ac6d82451 100644 --- a/etc/gnome-contacts.profile +++ b/etc/gnome-contacts.profile | |||
@@ -10,6 +10,7 @@ noblacklist ${DOCUMENTS} | |||
10 | 10 | ||
11 | include disable-common.inc | 11 | include disable-common.inc |
12 | include disable-devel.inc | 12 | include disable-devel.inc |
13 | include disable-exec.inc | ||
13 | include disable-interpreters.inc | 14 | include disable-interpreters.inc |
14 | include disable-passwdmgr.inc | 15 | include disable-passwdmgr.inc |
15 | include disable-programs.inc | 16 | include disable-programs.inc |
@@ -35,5 +36,3 @@ disable-mnt | |||
35 | private-dev | 36 | private-dev |
36 | private-tmp | 37 | private-tmp |
37 | 38 | ||
38 | noexec ${HOME} | ||
39 | noexec /tmp | ||
diff --git a/etc/hexchat.profile b/etc/hexchat.profile index e8abf4b31..ee70e6655 100644 --- a/etc/hexchat.profile +++ b/etc/hexchat.profile | |||
@@ -19,6 +19,7 @@ noblacklist /usr/local/lib/python3* | |||
19 | 19 | ||
20 | include disable-common.inc | 20 | include disable-common.inc |
21 | include disable-devel.inc | 21 | include disable-devel.inc |
22 | include disable-exec.inc | ||
22 | include disable-interpreters.inc | 23 | include disable-interpreters.inc |
23 | include disable-passwdmgr.inc | 24 | include disable-passwdmgr.inc |
24 | include disable-programs.inc | 25 | include disable-programs.inc |
@@ -53,5 +54,3 @@ private-dev | |||
53 | private-tmp | 54 | private-tmp |
54 | 55 | ||
55 | # memory-deny-write-execute - breaks python | 56 | # memory-deny-write-execute - breaks python |
56 | noexec ${HOME} | ||
57 | noexec /tmp | ||
diff --git a/etc/leafpad.profile b/etc/leafpad.profile index 47ea5606a..56a792c8e 100644 --- a/etc/leafpad.profile +++ b/etc/leafpad.profile | |||
@@ -10,6 +10,7 @@ noblacklist ${HOME}/.config/leafpad | |||
10 | 10 | ||
11 | include disable-common.inc | 11 | include disable-common.inc |
12 | include disable-devel.inc | 12 | include disable-devel.inc |
13 | include disable-exec.inc | ||
13 | include disable-interpreters.inc | 14 | include disable-interpreters.inc |
14 | include disable-passwdmgr.inc | 15 | include disable-passwdmgr.inc |
15 | include disable-programs.inc | 16 | include disable-programs.inc |
@@ -36,5 +37,3 @@ private-dev | |||
36 | private-lib | 37 | private-lib |
37 | private-tmp | 38 | private-tmp |
38 | 39 | ||
39 | noexec ${HOME} | ||
40 | noexec /tmp | ||
diff --git a/etc/mousepad.profile b/etc/mousepad.profile index 4500f74a5..3b9807b28 100644 --- a/etc/mousepad.profile +++ b/etc/mousepad.profile | |||
@@ -10,6 +10,7 @@ noblacklist ${HOME}/.config/Mousepad | |||
10 | 10 | ||
11 | include disable-common.inc | 11 | include disable-common.inc |
12 | include disable-devel.inc | 12 | include disable-devel.inc |
13 | include disable-exec.inc | ||
13 | include disable-interpreters.inc | 14 | include disable-interpreters.inc |
14 | include disable-passwdmgr.inc | 15 | include disable-passwdmgr.inc |
15 | include disable-programs.inc | 16 | include disable-programs.inc |
diff --git a/etc/ping.profile b/etc/ping.profile index bdd29c1a1..66574bab5 100644 --- a/etc/ping.profile +++ b/etc/ping.profile | |||
@@ -8,6 +8,7 @@ include globals.local | |||
8 | 8 | ||
9 | include disable-common.inc | 9 | include disable-common.inc |
10 | include disable-devel.inc | 10 | include disable-devel.inc |
11 | include disable-exec.inc | ||
11 | include disable-interpreters.inc | 12 | include disable-interpreters.inc |
12 | include disable-passwdmgr.inc | 13 | include disable-passwdmgr.inc |
13 | include disable-programs.inc | 14 | include disable-programs.inc |
@@ -46,5 +47,3 @@ private-tmp | |||
46 | 47 | ||
47 | # memory-deny-write-execute is built using seccomp; nonewprivs will kill it | 48 | # memory-deny-write-execute is built using seccomp; nonewprivs will kill it |
48 | #memory-deny-write-execute | 49 | #memory-deny-write-execute |
49 | noexec ${HOME} | ||
50 | noexec /tmp | ||
diff --git a/etc/pinta.profile b/etc/pinta.profile index 3dfe3cc1b..8151bc98f 100644 --- a/etc/pinta.profile +++ b/etc/pinta.profile | |||
@@ -12,6 +12,7 @@ noblacklist ${PICTURES} | |||
12 | 12 | ||
13 | include disable-common.inc | 13 | include disable-common.inc |
14 | include disable-devel.inc | 14 | include disable-devel.inc |
15 | include disable-exec.inc | ||
15 | include disable-interpreters.inc | 16 | include disable-interpreters.inc |
16 | include disable-passwdmgr.inc | 17 | include disable-passwdmgr.inc |
17 | include disable-programs.inc | 18 | include disable-programs.inc |
@@ -37,5 +38,3 @@ private-dev | |||
37 | private-cache | 38 | private-cache |
38 | private-tmp | 39 | private-tmp |
39 | 40 | ||
40 | noexec ${HOME} | ||
41 | noexec /tmp | ||
diff --git a/etc/sol.profile b/etc/sol.profile index c194eed05..ea1620b31 100644 --- a/etc/sol.profile +++ b/etc/sol.profile | |||
@@ -7,6 +7,7 @@ include globals.local | |||
7 | 7 | ||
8 | include disable-common.inc | 8 | include disable-common.inc |
9 | include disable-devel.inc | 9 | include disable-devel.inc |
10 | include disable-exec.inc | ||
10 | include disable-interpreters.inc | 11 | include disable-interpreters.inc |
11 | include disable-passwdmgr.inc | 12 | include disable-passwdmgr.inc |
12 | include disable-programs.inc | 13 | include disable-programs.inc |
@@ -40,5 +41,3 @@ private-dev | |||
40 | private-tmp | 41 | private-tmp |
41 | 42 | ||
42 | # memory-deny-write-execute | 43 | # memory-deny-write-execute |
43 | noexec ${HOME} | ||
44 | noexec /tmp | ||
diff --git a/etc/virtualbox.profile b/etc/virtualbox.profile index 1ef44dd5c..45f9949f3 100644 --- a/etc/virtualbox.profile +++ b/etc/virtualbox.profile | |||
@@ -14,6 +14,7 @@ noblacklist /usr/lib/virtualbox | |||
14 | noblacklist /usr/lib64/virtualbox | 14 | noblacklist /usr/lib64/virtualbox |
15 | 15 | ||
16 | include disable-common.inc | 16 | include disable-common.inc |
17 | include disable-exec.inc | ||
17 | include disable-passwdmgr.inc | 18 | include disable-passwdmgr.inc |
18 | include disable-programs.inc | 19 | include disable-programs.inc |
19 | 20 | ||
diff --git a/etc/warzone2100.profile b/etc/warzone2100.profile index 816f2236c..85cbc5e43 100644 --- a/etc/warzone2100.profile +++ b/etc/warzone2100.profile | |||
@@ -10,6 +10,7 @@ noblacklist ${HOME}/.warzone2100-3.* | |||
10 | 10 | ||
11 | include disable-common.inc | 11 | include disable-common.inc |
12 | include disable-devel.inc | 12 | include disable-devel.inc |
13 | include disable-exec.inc | ||
13 | include disable-interpreters.inc | 14 | include disable-interpreters.inc |
14 | include disable-passwdmgr.inc | 15 | include disable-passwdmgr.inc |
15 | include disable-programs.inc | 16 | include disable-programs.inc |
diff --git a/etc/wget.profile b/etc/wget.profile index c0a6f0d21..a7ef32e2c 100644 --- a/etc/wget.profile +++ b/etc/wget.profile | |||
@@ -13,6 +13,7 @@ noblacklist ${HOME}/.wget-hsts | |||
13 | noblacklist ${HOME}/.wgetrc | 13 | noblacklist ${HOME}/.wgetrc |
14 | 14 | ||
15 | include disable-common.inc | 15 | include disable-common.inc |
16 | include disable-exec.inc | ||
16 | include disable-passwdmgr.inc | 17 | include disable-passwdmgr.inc |
17 | include disable-programs.inc | 18 | include disable-programs.inc |
18 | 19 | ||
@@ -38,5 +39,3 @@ private-dev | |||
38 | # private-etc alternatives,resolv.conf,ca-certificates,ssl,pki,crypto-policies | 39 | # private-etc alternatives,resolv.conf,ca-certificates,ssl,pki,crypto-policies |
39 | # private-tmp | 40 | # private-tmp |
40 | 41 | ||
41 | noexec ${HOME} | ||
42 | noexec /tmp | ||
diff --git a/etc/xcalc.profile b/etc/xcalc.profile index 1941787b1..0ad423d30 100644 --- a/etc/xcalc.profile +++ b/etc/xcalc.profile | |||
@@ -7,6 +7,7 @@ include globals.local | |||
7 | 7 | ||
8 | include disable-common.inc | 8 | include disable-common.inc |
9 | include disable-devel.inc | 9 | include disable-devel.inc |
10 | include disable-exec.inc | ||
10 | include disable-interpreters.inc | 11 | include disable-interpreters.inc |
11 | include disable-passwdmgr.inc | 12 | include disable-passwdmgr.inc |
12 | include disable-programs.inc | 13 | include disable-programs.inc |
@@ -38,5 +39,3 @@ private-dev | |||
38 | private-lib | 39 | private-lib |
39 | private-tmp | 40 | private-tmp |
40 | 41 | ||
41 | noexec ${HOME} | ||
42 | noexec /tmp | ||