diff options
author | netblue30 <netblue30@yahoo.com> | 2017-02-20 11:01:47 -0500 |
---|---|---|
committer | GitHub <noreply@github.com> | 2017-02-20 11:01:47 -0500 |
commit | a1670beeea375ac01611c170bce451630b42657d (patch) | |
tree | acef4eed556ae5e35597f4009de4900110800a7f /etc | |
parent | fix kino profile chekcin (diff) | |
parent | extra thunar files (diff) | |
download | firejail-a1670beeea375ac01611c170bce451630b42657d.tar.gz firejail-a1670beeea375ac01611c170bce451630b42657d.tar.zst firejail-a1670beeea375ac01611c170bce451630b42657d.zip |
Merge pull request #1108 from Fred-Barclay/thunar
Thunar
Diffstat (limited to 'etc')
-rw-r--r-- | etc/Thunar.profile | 23 | ||||
-rw-r--r-- | etc/disable-programs.inc | 2 | ||||
-rw-r--r-- | etc/thunar.profile | 1 |
3 files changed, 26 insertions, 0 deletions
diff --git a/etc/Thunar.profile b/etc/Thunar.profile new file mode 100644 index 000000000..5a27177e0 --- /dev/null +++ b/etc/Thunar.profile | |||
@@ -0,0 +1,23 @@ | |||
1 | # This file is overwritten during software install. | ||
2 | # Persistent customizations should go in a .local file. | ||
3 | include /etc/firejail/Thunar.local | ||
4 | |||
5 | # Firejail profile for thunar | ||
6 | noblacklist ~/.config/Thunar | ||
7 | noblacklist ~/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml | ||
8 | |||
9 | include /etc/firejail/disable-common.inc | ||
10 | include /etc/firejail/disable-programs.inc | ||
11 | include /etc/firejail/disable-devel.inc | ||
12 | include /etc/firejail/disable-passwdmgr.inc | ||
13 | |||
14 | caps.drop all | ||
15 | netfilter | ||
16 | nogroups | ||
17 | nonewprivs | ||
18 | noroot | ||
19 | nosound | ||
20 | protocol unix | ||
21 | seccomp | ||
22 | shell none | ||
23 | tracelog | ||
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 802812fe7..cf654825a 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -70,6 +70,7 @@ blacklist ${HOME}/.config/Mumble | |||
70 | blacklist ${HOME}/.config/QuiteRss | 70 | blacklist ${HOME}/.config/QuiteRss |
71 | blacklist ${HOME}/.config/QuiteRssrc | 71 | blacklist ${HOME}/.config/QuiteRssrc |
72 | blacklist ${HOME}/.config/Slack | 72 | blacklist ${HOME}/.config/Slack |
73 | blacklist ${HOME}/.config/Thunar | ||
73 | blacklist ${HOME}/.config/VirtualBox | 74 | blacklist ${HOME}/.config/VirtualBox |
74 | blacklist ${HOME}/.config/Wire | 75 | blacklist ${HOME}/.config/Wire |
75 | blacklist ${HOME}/.config/ardour4 | 76 | blacklist ${HOME}/.config/ardour4 |
@@ -149,6 +150,7 @@ blacklist ${HOME}/.config/wireshark | |||
149 | blacklist ${HOME}/.config/xchat | 150 | blacklist ${HOME}/.config/xchat |
150 | blacklist ${HOME}/.config/xed | 151 | blacklist ${HOME}/.config/xed |
151 | blacklist ${HOME}/.config/xfburn | 152 | blacklist ${HOME}/.config/xfburn |
153 | blacklist ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml | ||
152 | blacklist ${HOME}/.config/xplayer | 154 | blacklist ${HOME}/.config/xplayer |
153 | blacklist ${HOME}/.config/xreader | 155 | blacklist ${HOME}/.config/xreader |
154 | blacklist ${HOME}/.config/xviewer | 156 | blacklist ${HOME}/.config/xviewer |
diff --git a/etc/thunar.profile b/etc/thunar.profile new file mode 100644 index 000000000..868f80912 --- /dev/null +++ b/etc/thunar.profile | |||
@@ -0,0 +1 @@ | |||
include /etc/firejail/Thunar.profile | |||