diff options
author | 2021-01-04 05:54:33 +0000 | |
---|---|---|
committer | 2021-01-04 05:54:33 +0000 | |
commit | 77c3bac1d2e653ff421dc9d41c8d0e186d134322 (patch) | |
tree | b3b2ebd0a55d6b4c80917d79edd5ac2c91613483 /etc | |
parent | Add ipc-namespace, machine-id (diff) | |
download | firejail-77c3bac1d2e653ff421dc9d41c8d0e186d134322.tar.gz firejail-77c3bac1d2e653ff421dc9d41c8d0e186d134322.tar.zst firejail-77c3bac1d2e653ff421dc9d41c8d0e186d134322.zip |
Add seccomp.block-secondary to email-common,mutt,neomutt; add mdwe to mutt,neomuut; some sorting
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-a-l/email-common.profile | 5 | ||||
-rw-r--r-- | etc/profile-m-z/mutt.profile | 9 | ||||
-rw-r--r-- | etc/profile-m-z/neomutt.profile | 9 |
3 files changed, 15 insertions, 8 deletions
diff --git a/etc/profile-a-l/email-common.profile b/etc/profile-a-l/email-common.profile index 96d616548..87edbe6f2 100644 --- a/etc/profile-a-l/email-common.profile +++ b/etc/profile-a-l/email-common.profile | |||
@@ -24,9 +24,9 @@ include disable-passwdmgr.inc | |||
24 | include disable-programs.inc | 24 | include disable-programs.inc |
25 | include disable-xdg.inc | 25 | include disable-xdg.inc |
26 | 26 | ||
27 | mkdir ${HOME}/.gnupg | ||
27 | mkfile ${HOME}/.config/mimeapps.list | 28 | mkfile ${HOME}/.config/mimeapps.list |
28 | mkfile ${HOME}/.signature | 29 | mkfile ${HOME}/.signature |
29 | mkdir ${HOME}/.gnupg | ||
30 | whitelist ${HOME}/.config/mimeapps.list | 30 | whitelist ${HOME}/.config/mimeapps.list |
31 | whitelist ${HOME}/.mozilla/firefox/profiles.ini | 31 | whitelist ${HOME}/.mozilla/firefox/profiles.ini |
32 | whitelist ${HOME}/.gnupg | 32 | whitelist ${HOME}/.gnupg |
@@ -59,6 +59,7 @@ nou2f | |||
59 | novideo | 59 | novideo |
60 | protocol unix,inet,inet6 | 60 | protocol unix,inet,inet6 |
61 | seccomp | 61 | seccomp |
62 | seccomp.block-secondary | ||
62 | shell none | 63 | shell none |
63 | tracelog | 64 | tracelog |
64 | 65 | ||
@@ -81,4 +82,4 @@ dbus-system none | |||
81 | #writable-var | 82 | #writable-var |
82 | 83 | ||
83 | read-only ${HOME}/.mozilla/firefox/profiles.ini | 84 | read-only ${HOME}/.mozilla/firefox/profiles.ini |
84 | read-only ${HOME}/.signature | 85 | read-only ${HOME}/.signature \ No newline at end of file |
diff --git a/etc/profile-m-z/mutt.profile b/etc/profile-m-z/mutt.profile index 9842b09fd..581a26368 100644 --- a/etc/profile-m-z/mutt.profile +++ b/etc/profile-m-z/mutt.profile | |||
@@ -55,16 +55,17 @@ mkdir ${HOME}/.bogofilter | |||
55 | mkdir ${HOME}/.cache/mutt | 55 | mkdir ${HOME}/.cache/mutt |
56 | mkdir ${HOME}/.config/mutt | 56 | mkdir ${HOME}/.config/mutt |
57 | mkdir ${HOME}/.config/nano | 57 | mkdir ${HOME}/.config/nano |
58 | mkdir ${HOME}/.elinks | ||
58 | mkdir ${HOME}/.emacs.d | 59 | mkdir ${HOME}/.emacs.d |
59 | mkdir ${HOME}/.gnupg | 60 | mkdir ${HOME}/.gnupg |
60 | mkdir ${HOME}/.mail | 61 | mkdir ${HOME}/.mail |
61 | mkdir ${HOME}/.mutt | 62 | mkdir ${HOME}/.mutt |
62 | mkdir ${HOME}/.vim | 63 | mkdir ${HOME}/.vim |
64 | mkdir ${HOME}/.w3m | ||
63 | mkdir ${HOME}/Mail | 65 | mkdir ${HOME}/Mail |
64 | mkdir ${HOME}/mail | 66 | mkdir ${HOME}/mail |
65 | mkdir ${HOME}/postponed | 67 | mkdir ${HOME}/postponed |
66 | mkdir ${HOME}/sent | 68 | mkdir ${HOME}/sent |
67 | mkfile ${HOME}/.elinks | ||
68 | mkfile ${HOME}/.emacs | 69 | mkfile ${HOME}/.emacs |
69 | mkfile ${HOME}/.mailcap | 70 | mkfile ${HOME}/.mailcap |
70 | mkfile ${HOME}/.msmtprc | 71 | mkfile ${HOME}/.msmtprc |
@@ -73,7 +74,6 @@ mkfile ${HOME}/.nanorc | |||
73 | mkfile ${HOME}/.signature | 74 | mkfile ${HOME}/.signature |
74 | mkfile ${HOME}/.viminfo | 75 | mkfile ${HOME}/.viminfo |
75 | mkfile ${HOME}/.vimrc | 76 | mkfile ${HOME}/.vimrc |
76 | mkfile ${HOME}/.w3m | ||
77 | whitelist ${DOCUMENTS} | 77 | whitelist ${DOCUMENTS} |
78 | whitelist ${DOWNLOADS} | 78 | whitelist ${DOWNLOADS} |
79 | whitelist ${HOME}/.Mail | 79 | whitelist ${HOME}/.Mail |
@@ -126,6 +126,7 @@ nou2f | |||
126 | novideo | 126 | novideo |
127 | protocol unix,inet,inet6 | 127 | protocol unix,inet,inet6 |
128 | seccomp | 128 | seccomp |
129 | seccomp.block-secondary | ||
129 | shell none | 130 | shell none |
130 | tracelog | 131 | tracelog |
131 | 132 | ||
@@ -140,7 +141,9 @@ writable-var | |||
140 | dbus-user none | 141 | dbus-user none |
141 | dbus-system none | 142 | dbus-system none |
142 | 143 | ||
144 | memory-deny-write-execute | ||
145 | |||
143 | read-only ${HOME}/.elinks | 146 | read-only ${HOME}/.elinks |
144 | read-only ${HOME}/.nanorc | 147 | read-only ${HOME}/.nanorc |
145 | read-only ${HOME}/.signature | 148 | read-only ${HOME}/.signature |
146 | read-only ${HOME}/.w3m | 149 | read-only ${HOME}/.w3m \ No newline at end of file |
diff --git a/etc/profile-m-z/neomutt.profile b/etc/profile-m-z/neomutt.profile index c9dbb3b09..dc07fa5eb 100644 --- a/etc/profile-m-z/neomutt.profile +++ b/etc/profile-m-z/neomutt.profile | |||
@@ -55,17 +55,18 @@ mkdir ${HOME}/.bogofilter | |||
55 | mkdir ${HOME}/.config/mutt | 55 | mkdir ${HOME}/.config/mutt |
56 | mkdir ${HOME}/.config/nano | 56 | mkdir ${HOME}/.config/nano |
57 | mkdir ${HOME}/.config/neomutt | 57 | mkdir ${HOME}/.config/neomutt |
58 | mkdir ${HOME}/.elinks | ||
58 | mkdir ${HOME}/.emacs.d | 59 | mkdir ${HOME}/.emacs.d |
59 | mkdir ${HOME}/.gnupg | 60 | mkdir ${HOME}/.gnupg |
60 | mkdir ${HOME}/.mail | 61 | mkdir ${HOME}/.mail |
61 | mkdir ${HOME}/.mutt | 62 | mkdir ${HOME}/.mutt |
62 | mkdir ${HOME}/.neomutt | 63 | mkdir ${HOME}/.neomutt |
63 | mkdir ${HOME}/.vim | 64 | mkdir ${HOME}/.vim |
65 | mkdir ${HOME}/.w3m | ||
64 | mkdir ${HOME}/Mail | 66 | mkdir ${HOME}/Mail |
65 | mkdir ${HOME}/mail | 67 | mkdir ${HOME}/mail |
66 | mkdir ${HOME}/postponed | 68 | mkdir ${HOME}/postponed |
67 | mkdir ${HOME}/sent | 69 | mkdir ${HOME}/sent |
68 | mkfile ${HOME}/.elinks | ||
69 | mkfile ${HOME}/.emacs | 70 | mkfile ${HOME}/.emacs |
70 | mkfile ${HOME}/.mailcap | 71 | mkfile ${HOME}/.mailcap |
71 | mkfile ${HOME}/.msmtprc | 72 | mkfile ${HOME}/.msmtprc |
@@ -75,7 +76,6 @@ mkfile ${HOME}/.neomuttrc | |||
75 | mkfile ${HOME}/.signature | 76 | mkfile ${HOME}/.signature |
76 | mkfile ${HOME}/.viminfo | 77 | mkfile ${HOME}/.viminfo |
77 | mkfile ${HOME}/.vimrc | 78 | mkfile ${HOME}/.vimrc |
78 | mkfile ${HOME}/.w3m | ||
79 | whitelist ${DOCUMENTS} | 79 | whitelist ${DOCUMENTS} |
80 | whitelist ${DOWNLOADS} | 80 | whitelist ${DOWNLOADS} |
81 | whitelist ${HOME}/.Mail | 81 | whitelist ${HOME}/.Mail |
@@ -130,6 +130,7 @@ nou2f | |||
130 | novideo | 130 | novideo |
131 | protocol unix,inet,inet6 | 131 | protocol unix,inet,inet6 |
132 | seccomp | 132 | seccomp |
133 | seccomp.block-secondary | ||
133 | shell none | 134 | shell none |
134 | tracelog | 135 | tracelog |
135 | 136 | ||
@@ -144,7 +145,9 @@ writable-var | |||
144 | dbus-user none | 145 | dbus-user none |
145 | dbus-system none | 146 | dbus-system none |
146 | 147 | ||
148 | memory-deny-write-execute | ||
149 | |||
147 | read-only ${HOME}/.elinks | 150 | read-only ${HOME}/.elinks |
148 | read-only ${HOME}/.nanorc | 151 | read-only ${HOME}/.nanorc |
149 | read-only ${HOME}/.signature | 152 | read-only ${HOME}/.signature |
150 | read-only ${HOME}/.w3m | 153 | read-only ${HOME}/.w3m \ No newline at end of file |