diff options
author | 2023-01-04 12:15:02 -0500 | |
---|---|---|
committer | 2023-01-04 12:15:02 -0500 | |
commit | 223fdeff5837d98bcaca32ccac01113cf5f9265a (patch) | |
tree | f2a618bf29e17d1f8737075e68f05891b0ec0723 /etc | |
parent | Merge pull request #5475 from KOLANICH-tools/aa_fix (diff) | |
parent | Create electron-hardened.inc.profile (diff) | |
download | firejail-223fdeff5837d98bcaca32ccac01113cf5f9265a.tar.gz firejail-223fdeff5837d98bcaca32ccac01113cf5f9265a.tar.zst firejail-223fdeff5837d98bcaca32ccac01113cf5f9265a.zip |
Merge pull request #5569 from glitsj16/electron-hardening
electron hardening fixes
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-a-l/electron-hardened.inc.profile | 10 | ||||
-rw-r--r-- | etc/profile-a-l/electron.profile | 4 |
2 files changed, 12 insertions, 2 deletions
diff --git a/etc/profile-a-l/electron-hardened.inc.profile b/etc/profile-a-l/electron-hardened.inc.profile new file mode 100644 index 000000000..eacf5cebe --- /dev/null +++ b/etc/profile-a-l/electron-hardened.inc.profile | |||
@@ -0,0 +1,10 @@ | |||
1 | # Firejail profile alias for chrome-common-hardened.inc | ||
2 | # This file is overwritten after every install/update | ||
3 | # Persistent local customizations | ||
4 | include electron-hardened.inc.local | ||
5 | # Persistent global definitions | ||
6 | # added by caller profile | ||
7 | #include globals.local | ||
8 | |||
9 | # Redirect | ||
10 | include chrome-common-hardened.inc.profile | ||
diff --git a/etc/profile-a-l/electron.profile b/etc/profile-a-l/electron.profile index c1d337abd..c15e43399 100644 --- a/etc/profile-a-l/electron.profile +++ b/etc/profile-a-l/electron.profile | |||
@@ -22,8 +22,8 @@ include whitelist-runuser-common.inc | |||
22 | include whitelist-usr-share-common.inc | 22 | include whitelist-usr-share-common.inc |
23 | include whitelist-var-common.inc | 23 | include whitelist-var-common.inc |
24 | 24 | ||
25 | # Add the next line to your chromium-common.local if your kernel allows unprivileged userns clone. | 25 | # Add the next line to your electron.local if your kernel allows unprivileged userns clone. |
26 | #include chromium-common-hardened.inc.profile | 26 | #include electron-hardened.inc.profile |
27 | 27 | ||
28 | apparmor | 28 | apparmor |
29 | caps.keep sys_admin,sys_chroot | 29 | caps.keep sys_admin,sys_chroot |