diff options
| author |  netblue30 <netblue30@protonmail.com> | 2023-01-04 12:15:02 -0500 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2023-01-04 12:15:02 -0500 |
| commit | 223fdeff5837d98bcaca32ccac01113cf5f9265a (patch) | |
| tree | f2a618bf29e17d1f8737075e68f05891b0ec0723 /etc | |
| parent | Merge pull request #5475 from KOLANICH-tools/aa_fix (diff) | |
| parent | Create electron-hardened.inc.profile (diff) | |
| download | firejail-223fdeff5837d98bcaca32ccac01113cf5f9265a.tar.gz firejail-223fdeff5837d98bcaca32ccac01113cf5f9265a.tar.zst firejail-223fdeff5837d98bcaca32ccac01113cf5f9265a.zip | |
Merge pull request #5569 from glitsj16/electron-hardening
electron hardening fixes
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/profile-a-l/electron-hardened.inc.profile | 10 | ||||
| -rw-r--r-- | etc/profile-a-l/electron.profile | 4 |
2 files changed, 12 insertions, 2 deletions
diff --git a/etc/profile-a-l/electron-hardened.inc.profile b/etc/profile-a-l/electron-hardened.inc.profile new file mode 100644 index 000000000..eacf5cebe --- /dev/null +++ b/etc/profile-a-l/electron-hardened.inc.profile | |||
| @@ -0,0 +1,10 @@ | |||
| 1 | # Firejail profile alias for chrome-common-hardened.inc | ||
| 2 | # This file is overwritten after every install/update | ||
| 3 | # Persistent local customizations | ||
| 4 | include electron-hardened.inc.local | ||
| 5 | # Persistent global definitions | ||
| 6 | # added by caller profile | ||
| 7 | #include globals.local | ||
| 8 | |||
| 9 | # Redirect | ||
| 10 | include chrome-common-hardened.inc.profile | ||
diff --git a/etc/profile-a-l/electron.profile b/etc/profile-a-l/electron.profile index c1d337abd..c15e43399 100644 --- a/etc/profile-a-l/electron.profile +++ b/etc/profile-a-l/electron.profile | |||
| @@ -22,8 +22,8 @@ include whitelist-runuser-common.inc | |||
| 22 | include whitelist-usr-share-common.inc | 22 | include whitelist-usr-share-common.inc |
| 23 | include whitelist-var-common.inc | 23 | include whitelist-var-common.inc |
| 24 | 24 | ||
| 25 | # Add the next line to your chromium-common.local if your kernel allows unprivileged userns clone. | 25 | # Add the next line to your electron.local if your kernel allows unprivileged userns clone. |
| 26 | #include chromium-common-hardened.inc.profile | 26 | #include electron-hardened.inc.profile |
| 27 | 27 | ||
| 28 | apparmor | 28 | apparmor |
| 29 | caps.keep sys_admin,sys_chroot | 29 | caps.keep sys_admin,sys_chroot |