aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2020-01-26 20:06:21 +0000
committerLibravatar GitHub <noreply@github.com>2020-01-26 20:06:21 +0000
commitc921413c0ce0779cf03a6e5f1a5f831fa3a73573 (patch)
treefe9fd5f5f3559e0a51f7bb058a637781e36e5518 /etc
parentfix beaker.profile (diff)
downloadfirejail-c921413c0ce0779cf03a6e5f1a5f831fa3a73573.tar.gz
firejail-c921413c0ce0779cf03a6e5f1a5f831fa3a73573.tar.zst
firejail-c921413c0ce0779cf03a6e5f1a5f831fa3a73573.zip
refactor some profiles as electron redirects (#3188)
* refactor as electron redirect * refactor as electron redirect * refactor as electron redirect
Diffstat (limited to 'etc')
-rw-r--r--etc/teams-for-linux.profile22
-rw-r--r--etc/whalebird.profile21
-rw-r--r--etc/wire-desktop.profile21
3 files changed, 22 insertions, 42 deletions
diff --git a/etc/teams-for-linux.profile b/etc/teams-for-linux.profile
index d9e874be2..a3feb42ad 100644
--- a/etc/teams-for-linux.profile
+++ b/etc/teams-for-linux.profile
@@ -1,37 +1,26 @@
1# Firejail profile for teams-for-linux 1# Firejail profile for teams-for-linux
2# Description: Teams for Linux is an Electron application for Microsoft's team collaboration and chat program 2# Description: Unofficial Microsoft Teams client for Linux using Electron.
3# This file is overwritten after every install/update 3# This file is overwritten after every install/update
4# Persistent local customizations 4# Persistent local customizations
5include teams-for-linux.local 5include teams-for-linux.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7# added by included profile
8#include globals.local
8 9
9noblacklist ${HOME}/.config/teams-for-linux 10noblacklist ${HOME}/.config/teams-for-linux
10 11
11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
13include disable-exec.inc 13include disable-exec.inc
14include disable-interpreters.inc 14include disable-interpreters.inc
15include disable-passwdmgr.inc
16include disable-programs.inc
17 15
18mkdir ${HOME}/.config/teams-for-linux 16mkdir ${HOME}/.config/teams-for-linux
19whitelist ${HOME}/.config/teams-for-linux 17whitelist ${HOME}/.config/teams-for-linux
20whitelist ${DOWNLOADS}
21include whitelist-common.inc 18include whitelist-common.inc
22include whitelist-var-common.inc 19include whitelist-var-common.inc
23 20
24caps.drop all 21ignore nodbus
25netfilter
26nodvd
27nogroups
28nonewprivs
29noroot
30notv
31nou2f 22nou2f
32novideo 23novideo
33protocol unix,inet,inet6,netlink
34seccomp
35shell none 24shell none
36 25
37disable-mnt 26disable-mnt
@@ -40,3 +29,6 @@ private-cache
40private-dev 29private-dev
41private-etc ca-certificates,crypto-policies,fonts,ld.so.cache,localtime,machine-id,pki,resolv.conf,ssl 30private-etc ca-certificates,crypto-policies,fonts,ld.so.cache,localtime,machine-id,pki,resolv.conf,ssl
42private-tmp 31private-tmp
32
33# Redirect
34include electron.profile
diff --git a/etc/whalebird.profile b/etc/whalebird.profile
index 26932b6b3..bed1a8623 100644
--- a/etc/whalebird.profile
+++ b/etc/whalebird.profile
@@ -4,37 +4,25 @@
4# Persistent local customizations 4# Persistent local customizations
5include whalebird.local 5include whalebird.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7# added by included profile
8#include globals.local
8 9
9noblacklist ${HOME}/.config/Whalebird 10noblacklist ${HOME}/.config/Whalebird
10 11
11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
13include disable-exec.inc 13include disable-exec.inc
14include disable-interpreters.inc 14include disable-interpreters.inc
15include disable-passwdmgr.inc
16include disable-programs.inc
17include disable-xdg.inc 15include disable-xdg.inc
18 16
19mkdir ${HOME}/.config/Whalebird 17mkdir ${HOME}/.config/Whalebird
20whitelist ${HOME}/.config/Whalebird 18whitelist ${HOME}/.config/Whalebird
21whitelist ${DOWNLOADS}
22include whitelist-common.inc 19include whitelist-common.inc
23include whitelist-var-common.inc 20include whitelist-var-common.inc
24 21
25apparmor 22ignore nodbus
26caps.drop all
27netfilter
28no3d 23no3d
29nodvd
30nogroups
31nonewprivs
32noroot
33notv
34nou2f 24nou2f
35novideo 25novideo
36protocol unix,inet,inet6
37seccomp
38shell none 26shell none
39 27
40disable-mnt 28disable-mnt
@@ -43,3 +31,6 @@ private-cache
43private-dev 31private-dev
44private-etc fonts,machine-id 32private-etc fonts,machine-id
45private-tmp 33private-tmp
34
35# Redirect
36include electron.profile
diff --git a/etc/wire-desktop.profile b/etc/wire-desktop.profile
index a56ecef1b..78c4b418a 100644
--- a/etc/wire-desktop.profile
+++ b/etc/wire-desktop.profile
@@ -1,36 +1,33 @@
1# Firejail profile for wire-desktop 1# Firejail profile for wire-desktop
2# Description: End-to-end encrypted messenger with file sharing, voice calls and video conferences
2# This file is overwritten after every install/update 3# This file is overwritten after every install/update
3# Persistent local customizations 4# Persistent local customizations
4include wire-desktop.local 5include wire-desktop.local
5# Persistent global definitions 6# Persistent global definitions
6include globals.local 7# added by included profile
8#include globals.local
9
10# Debian/Ubuntu use /opt/Wire. As that is not in PATH by default, run `firejail /opt/Wire/wire-desktop` to start it.
7 11
8noblacklist ${HOME}/.config/Wire 12noblacklist ${HOME}/.config/Wire
9 13
10include disable-common.inc
11include disable-devel.inc 14include disable-devel.inc
12include disable-interpreters.inc 15include disable-interpreters.inc
13include disable-passwdmgr.inc
14include disable-programs.inc
15 16
16mkdir ${HOME}/.config/Wire 17mkdir ${HOME}/.config/Wire
17whitelist ${HOME}/.config/Wire 18whitelist ${HOME}/.config/Wire
18whitelist ${DOWNLOADS}
19include whitelist-common.inc 19include whitelist-common.inc
20 20
21caps.keep sys_admin,sys_chroot 21caps.keep sys_admin,sys_chroot
22netfilter 22ignore nodbus
23nodvd
24nogroups
25notv
26nou2f 23nou2f
27shell none 24shell none
28 25
29# Note: The current version of Wire is located in /opt/wire-desktop/wire-desktop, and therefore
30# it is not in PATH. To use Wire with firejail, run "firejail /opt/wire-desktop/wire-desktop"
31
32disable-mnt 26disable-mnt
33private-bin bash,electron,electron4,env,sh,wire-desktop 27private-bin bash,electron,electron4,env,sh,wire-desktop
34private-dev 28private-dev
35private-etc alternatives,ca-certificates,crypto-policies,fonts,machine-id,pki,resolv.conf,ssl 29private-etc alternatives,ca-certificates,crypto-policies,fonts,machine-id,pki,resolv.conf,ssl
36private-tmp 30private-tmp
31
32# Redirect
33include electron.profile
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-08-25 04:34:52 +0000