aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2020-03-23 14:32:49 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2020-03-23 14:32:49 -0400
commit255697b15aff5c6b57cb77b2dbedf6cffb366efe (patch)
tree00a7d8a0d9f33da0bc95075237a448667a09c2d7 /etc
parentMerge pull request #3293 from 0x7969/master (diff)
downloadfirejail-255697b15aff5c6b57cb77b2dbedf6cffb366efe.tar.gz
firejail-255697b15aff5c6b57cb77b2dbedf6cffb366efe.tar.zst
firejail-255697b15aff5c6b57cb77b2dbedf6cffb366efe.zip
apparmor
Diffstat (limited to 'etc')
-rw-r--r--etc/gnome-books.profile2
-rw-r--r--etc/gnome-characters.profile1
-rw-r--r--etc/gnome-font-viewer.profile2
-rw-r--r--etc/gnome-music.profile6
-rw-r--r--etc/gnome-photos.profile1
-rw-r--r--etc/gnome-recipes.profile3
-rw-r--r--etc/kmplayer.profile41
-rw-r--r--etc/pitivi.profile2
-rw-r--r--etc/rhythmbox.profile4
-rw-r--r--etc/ristretto.profile4
-rw-r--r--etc/shellcheck.profile1
-rw-r--r--etc/simutrans.profile3
-rw-r--r--etc/smtube.profile1
-rw-r--r--etc/widelands.profile1
-rw-r--r--etc/xcalc.profile1
15 files changed, 68 insertions, 5 deletions
diff --git a/etc/gnome-books.profile b/etc/gnome-books.profile
index 84e38d0e1..2dc1173a4 100644
--- a/etc/gnome-books.profile
+++ b/etc/gnome-books.profile
@@ -23,7 +23,9 @@ include disable-xdg.inc
23 23
24include whitelist-var-common.inc 24include whitelist-var-common.inc
25 25
26apparmor
26caps.drop all 27caps.drop all
28net none
27netfilter 29netfilter
28no3d 30no3d
29nodvd 31nodvd
diff --git a/etc/gnome-characters.profile b/etc/gnome-characters.profile
index 2d4724610..f02fe13f6 100644
--- a/etc/gnome-characters.profile
+++ b/etc/gnome-characters.profile
@@ -22,6 +22,7 @@ include whitelist-common.inc
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
25apparmor
25caps.drop all 26caps.drop all
26machine-id 27machine-id
27net none 28net none
diff --git a/etc/gnome-font-viewer.profile b/etc/gnome-font-viewer.profile
index 468ef0401..3f186b90b 100644
--- a/etc/gnome-font-viewer.profile
+++ b/etc/gnome-font-viewer.profile
@@ -17,7 +17,9 @@ include disable-xdg.inc
17 17
18include whitelist-var-common.inc 18include whitelist-var-common.inc
19 19
20apparmor
20caps.drop all 21caps.drop all
22net none
21netfilter 23netfilter
22no3d 24no3d
23nodvd 25nodvd
diff --git a/etc/gnome-music.profile b/etc/gnome-music.profile
index ad3fa1753..7b27eb333 100644
--- a/etc/gnome-music.profile
+++ b/etc/gnome-music.profile
@@ -23,6 +23,7 @@ include disable-xdg.inc
23 23
24include whitelist-var-common.inc 24include whitelist-var-common.inc
25 25
26apparmor
26caps.drop all 27caps.drop all
27netfilter 28netfilter
28no3d 29no3d
@@ -37,8 +38,9 @@ seccomp
37shell none 38shell none
38tracelog 39tracelog
39 40
40private-bin env,gio-launch-desktop,gnome-music,python*,yelp 41# private-bin calls a file manager - whatever is installed!
42#private-bin env,gio-launch-desktop,gnome-music,python*,yelp
41private-dev 43private-dev
42private-etc alternatives,asound.conf,fonts,machine-id,pulse 44private-etc alternatives,asound.conf,fonts,machine-id,pulse,fonts,xdg,gtk-3.0,dconf,selinux,
43private-tmp 45private-tmp
44 46
diff --git a/etc/gnome-photos.profile b/etc/gnome-photos.profile
index aa0b7dbe3..c28217efb 100644
--- a/etc/gnome-photos.profile
+++ b/etc/gnome-photos.profile
@@ -19,6 +19,7 @@ include disable-programs.inc
19 19
20include whitelist-var-common.inc 20include whitelist-var-common.inc
21 21
22apparmor
22caps.drop all 23caps.drop all
23netfilter 24netfilter
24nodvd 25nodvd
diff --git a/etc/gnome-recipes.profile b/etc/gnome-recipes.profile
index b4791afc5..45a359624 100644
--- a/etc/gnome-recipes.profile
+++ b/etc/gnome-recipes.profile
@@ -26,7 +26,8 @@ include whitelist-common.inc
26include whitelist-usr-share-common.inc 26include whitelist-usr-share-common.inc
27include whitelist-var-common.inc 27include whitelist-var-common.inc
28 28
29caps.drop all 29apparmor
30aps.drop all
30ipc-namespace 31ipc-namespace
31machine-id 32machine-id
32netfilter 33netfilter
diff --git a/etc/kmplayer.profile b/etc/kmplayer.profile
new file mode 100644
index 000000000..7eabde61d
--- /dev/null
+++ b/etc/kmplayer.profile
@@ -0,0 +1,41 @@
1# Firejail profile for mplayer
2# Description: mplayer KDE GUI (movie player)
3# This file is overwritten after every install/update
4# Persistent local customizations
5include kmplayer.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/kmplayerrc
10noblacklist ${HOME}/.kde/share/config/kmplayerrc
11noblacklist ${HOME}/.local/share/kmplayer
12noblacklist ${MUSIC}
13noblacklist ${VIDEOS}
14
15include disable-common.inc
16include disable-devel.inc
17include disable-exec.inc
18include disable-interpreters.inc
19include disable-passwdmgr.inc
20include disable-programs.inc
21include disable-xdg.inc
22
23include whitelist-usr-share-common.inc
24include whitelist-var-common.inc
25
26apparmor
27caps.drop all
28netfilter
29nogroups
30nonewprivs
31noroot
32nou2f
33protocol unix,inet,inet6,netlink
34seccomp
35shell none
36
37# private-bin kmplayer,mplayer
38private-cache
39private-dev
40private-tmp
41
diff --git a/etc/pitivi.profile b/etc/pitivi.profile
index 89a6a020b..faa19f27a 100644
--- a/etc/pitivi.profile
+++ b/etc/pitivi.profile
@@ -22,8 +22,10 @@ include disable-programs.inc
22 22
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
25apparmor
25caps.drop all 26caps.drop all
26ipc-namespace 27ipc-namespace
28net none
27netfilter 29netfilter
28nodvd 30nodvd
29nogroups 31nogroups
diff --git a/etc/rhythmbox.profile b/etc/rhythmbox.profile
index ad8b1015e..aff8b08e3 100644
--- a/etc/rhythmbox.profile
+++ b/etc/rhythmbox.profile
@@ -28,7 +28,7 @@ whitelist /usr/share/libquvi-scripts
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc 29include whitelist-var-common.inc
30 30
31# apparmor - makes settings immutable 31apparmor
32caps.drop all 32caps.drop all
33netfilter 33netfilter
34# nodbus - makes settings immutable 34# nodbus - makes settings immutable
@@ -38,7 +38,7 @@ noroot
38notv 38notv
39nou2f 39nou2f
40novideo 40novideo
41protocol unix,inet,inet6 41protocol unix,inet,inet6,netlink
42seccomp 42seccomp
43shell none 43shell none
44tracelog 44tracelog
diff --git a/etc/ristretto.profile b/etc/ristretto.profile
index 8fcbb203c..a1cbdf16c 100644
--- a/etc/ristretto.profile
+++ b/etc/ristretto.profile
@@ -17,7 +17,11 @@ include disable-interpreters.inc
17include disable-passwdmgr.inc 17include disable-passwdmgr.inc
18include disable-programs.inc 18include disable-programs.inc
19 19
20include whitelist-var-common.inc
21
22apparmor
20caps.drop all 23caps.drop all
24net none
21netfilter 25netfilter
22no3d 26no3d
23nodvd 27nodvd
diff --git a/etc/shellcheck.profile b/etc/shellcheck.profile
index f8744bdf8..7b4041222 100644
--- a/etc/shellcheck.profile
+++ b/etc/shellcheck.profile
@@ -23,6 +23,7 @@ whitelist /usr/share/shellcheck
23include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
24include whitelist-var-common.inc 24include whitelist-var-common.inc
25 25
26apparmor
26caps.drop all 27caps.drop all
27ipc-namespace 28ipc-namespace
28machine-id 29machine-id
diff --git a/etc/simutrans.profile b/etc/simutrans.profile
index c6f5f70b0..73093a259 100644
--- a/etc/simutrans.profile
+++ b/etc/simutrans.profile
@@ -10,6 +10,7 @@ noblacklist ${HOME}/.simutrans
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
13include disable-exec.inc
13include disable-interpreters.inc 14include disable-interpreters.inc
14include disable-passwdmgr.inc 15include disable-passwdmgr.inc
15include disable-programs.inc 16include disable-programs.inc
@@ -17,7 +18,9 @@ include disable-programs.inc
17mkdir ${HOME}/.simutrans 18mkdir ${HOME}/.simutrans
18whitelist ${HOME}/.simutrans 19whitelist ${HOME}/.simutrans
19include whitelist-common.inc 20include whitelist-common.inc
21include whitelist-var-common.inc
20 22
23apparmor
21caps.drop all 24caps.drop all
22net none 25net none
23nodbus 26nodbus
diff --git a/etc/smtube.profile b/etc/smtube.profile
index 98e0229ce..79bc02979 100644
--- a/etc/smtube.profile
+++ b/etc/smtube.profile
@@ -28,6 +28,7 @@ whitelist /usr/share/smtube
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc 29include whitelist-var-common.inc
30 30
31apparmor
31caps.drop all 32caps.drop all
32netfilter 33netfilter
33nodvd 34nodvd
diff --git a/etc/widelands.profile b/etc/widelands.profile
index c6b5f27da..dd956fa28 100644
--- a/etc/widelands.profile
+++ b/etc/widelands.profile
@@ -21,6 +21,7 @@ whitelist ${HOME}/.widelands
21include whitelist-common.inc 21include whitelist-common.inc
22include whitelist-var-common.inc 22include whitelist-var-common.inc
23 23
24apparmor
24caps.drop all 25caps.drop all
25ipc-namespace 26ipc-namespace
26netfilter 27netfilter
diff --git a/etc/xcalc.profile b/etc/xcalc.profile
index a096f803c..a644af351 100644
--- a/etc/xcalc.profile
+++ b/etc/xcalc.profile
@@ -15,6 +15,7 @@ include disable-xdg.inc
15 15
16include whitelist-var-common.inc 16include whitelist-var-common.inc
17 17
18apparmor
18caps.drop all 19caps.drop all
19net none 20net none
20no3d 21no3d
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-02 19:13:57 +0000