aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar Fred-Barclay <Fred-Barclay@users.noreply.github.com>2018-11-02 18:00:55 -0500
committerLibravatar Fred-Barclay <Fred-Barclay@users.noreply.github.com>2018-11-02 18:00:55 -0500
commited74dadd85faae9f74c05ae1caf50b3c642ea3b1 (patch)
treeed8c6049f73fd319940d190b5f4cf69b2c9a38fa /etc
parentMerge pull request #2227 from alexara/alexara-patch-1 (diff)
downloadfirejail-ed74dadd85faae9f74c05ae1caf50b3c642ea3b1.tar.gz
firejail-ed74dadd85faae9f74c05ae1caf50b3c642ea3b1.tar.zst
firejail-ed74dadd85faae9f74c05ae1caf50b3c642ea3b1.zip
Add Mendeley profile
Diffstat (limited to 'etc')
-rw-r--r--etc/disable-programs.inc4
-rw-r--r--etc/mendeleydesktop.profile52
2 files changed, 56 insertions, 0 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index edf3c7be5..531edcc89 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -68,6 +68,7 @@ blacklist ${HOME}/.config/INRIA
68blacklist ${HOME}/.config/InSilmaril 68blacklist ${HOME}/.config/InSilmaril
69blacklist ${HOME}/.config/Luminance 69blacklist ${HOME}/.config/Luminance
70blacklist ${HOME}/.config/Meltytech 70blacklist ${HOME}/.config/Meltytech
71blacklist ${HOME}/.config/Mendeley Ltd.
71blacklist ${HOME}/.config/Min 72blacklist ${HOME}/.config/Min
72blacklist ${HOME}/.config/Mousepad 73blacklist ${HOME}/.config/Mousepad
73blacklist ${HOME}/.config/Mumble 74blacklist ${HOME}/.config/Mumble
@@ -374,6 +375,7 @@ blacklist ${HOME}/.local/share/0ad
374blacklist ${HOME}/.local/share/3909/PapersPlease 375blacklist ${HOME}/.local/share/3909/PapersPlease
375blacklist ${HOME}/.local/share/Empathy 376blacklist ${HOME}/.local/share/Empathy
376blacklist ${HOME}/.local/share/JetBrains 377blacklist ${HOME}/.local/share/JetBrains
378blacklist ${HOME}/.local/share/Mendeley Ltd.
377blacklist ${HOME}/.local/share/Mumble 379blacklist ${HOME}/.local/share/Mumble
378blacklist ${HOME}/.local/share/PBE 380blacklist ${HOME}/.local/share/PBE
379blacklist ${HOME}/.local/share/QMediathekView 381blacklist ${HOME}/.local/share/QMediathekView
@@ -393,6 +395,7 @@ blacklist ${HOME}/.local/share/caja-python
393blacklist ${HOME}/.local/share/cdprojektred 395blacklist ${HOME}/.local/share/cdprojektred
394blacklist ${HOME}/.local/share/clipit 396blacklist ${HOME}/.local/share/clipit
395blacklist ${HOME}/.local/share/contacts 397blacklist ${HOME}/.local/share/contacts
398blacklist ${HOME}/.local/share/data/Mendeley Ltd.
396blacklist ${HOME}/.local/share/data/Mumble 399blacklist ${HOME}/.local/share/data/Mumble
397blacklist ${HOME}/.local/share/data/MusE 400blacklist ${HOME}/.local/share/data/MusE
398blacklist ${HOME}/.local/share/data/MuseScore 401blacklist ${HOME}/.local/share/data/MuseScore
@@ -588,6 +591,7 @@ blacklist ${HOME}/.cache/ksplashqml
588blacklist ${HOME}/.cache/kwin 591blacklist ${HOME}/.cache/kwin
589blacklist ${HOME}/.cache/libgweather 592blacklist ${HOME}/.cache/libgweather
590blacklist ${HOME}/.cache/liferea 593blacklist ${HOME}/.cache/liferea
594blacklist ${HOME}/.cache/Mendeley Ltd.
591blacklist ${HOME}/.cache/midori 595blacklist ${HOME}/.cache/midori
592blacklist ${HOME}/.cache/moonchild productions/basilisk 596blacklist ${HOME}/.cache/moonchild productions/basilisk
593blacklist ${HOME}/.cache/moonchild productions/pale moon 597blacklist ${HOME}/.cache/moonchild productions/pale moon
diff --git a/etc/mendeleydesktop.profile b/etc/mendeleydesktop.profile
new file mode 100644
index 000000000..280baebdc
--- /dev/null
+++ b/etc/mendeleydesktop.profile
@@ -0,0 +1,52 @@
1# Firejail profile for Mendeley
2# Description: Academic software for managing and sharing research papers.
3# This file is overwritten after every install/update
4# Persistent local customizations
5include mendeleydesktop.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${DOCUMENTS}
10noblacklist ${DOWNLOADS}
11noblacklist ${HOME}/.cache/Mendeley Ltd.
12noblacklist ${HOME}/.config/Mendeley Ltd.
13noblacklist ${HOME}/.local/share/Mendeley Ltd.
14noblacklist ${HOME}/.local/share/data/Mendeley Ltd.
15noblacklist ${HOME}/.pki/nssdb
16
17# Allow python (blacklisted by disable-interpreters.inc)
18noblacklist ${PATH}/python2*
19noblacklist ${PATH}/python3*
20noblacklist /usr/lib/python2*
21noblacklist /usr/lib/python3*
22
23include disable-common.inc
24include disable-devel.inc
25include disable-interpreters.inc
26include disable-passwdmgr.inc
27include disable-programs.inc
28
29include whitelist-var-common.inc
30
31caps.drop all
32netfilter
33nodbus
34nodvd
35nogroups
36nonewprivs
37noroot
38notv
39nou2f
40novideo
41protocol unix,inet,inet6,netlink
42seccomp
43shell none
44tracelog
45
46disable-mnt
47private-bin mendeleydesktop,python*,env,gconftool-2,which,sh,ln,cat,update-desktop-database
48private-dev
49private-tmp
50
51noexec ${HOME}
52noexec /tmp
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-08 16:41:32 +0000