diff options
author | 2016-08-05 08:40:34 -0400 | |
---|---|---|
committer | 2016-08-05 08:40:34 -0400 | |
commit | 1d2e06c45f8f6af6c2d64a46be687d586db6e6b7 (patch) | |
tree | 846b5d4e290c33afc9270721e68e18540c1d2806 /etc | |
parent | fix whitelist ~/deletme problem (diff) | |
parent | tightened vlc (diff) | |
download | firejail-1d2e06c45f8f6af6c2d64a46be687d586db6e6b7.tar.gz firejail-1d2e06c45f8f6af6c2d64a46be687d586db6e6b7.tar.zst firejail-1d2e06c45f8f6af6c2d64a46be687d586db6e6b7.zip |
Merge pull request #684 from Fred-Barclay/checkmate
Checkmate
Diffstat (limited to 'etc')
-rw-r--r-- | etc/disable-programs.inc | 1 | ||||
-rw-r--r-- | etc/gnome-chess.profile | 20 | ||||
-rw-r--r-- | etc/vlc.profile | 6 |
3 files changed, 24 insertions, 3 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index ed7710728..01e68506d 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -128,3 +128,4 @@ blacklist ${HOME}/.local/share/xplayer | |||
128 | blacklist ${HOME}/.local/share/totem | 128 | blacklist ${HOME}/.local/share/totem |
129 | blacklist ${HOME}/.local/share/psi+ | 129 | blacklist ${HOME}/.local/share/psi+ |
130 | blacklist ${HOME}/.local/share/pix | 130 | blacklist ${HOME}/.local/share/pix |
131 | blacklist ${HOME}/.local/share/gnome-chess | ||
diff --git a/etc/gnome-chess.profile b/etc/gnome-chess.profile new file mode 100644 index 000000000..e93970f7d --- /dev/null +++ b/etc/gnome-chess.profile | |||
@@ -0,0 +1,20 @@ | |||
1 | # Firejail profile for gnome-chess | ||
2 | noblacklist /.local/share/gnome-chess | ||
3 | |||
4 | include /etc/firejail/disable-common.inc | ||
5 | include /etc/firejail/disable-devel.inc | ||
6 | include /etc/firejail/disable-programs.inc | ||
7 | include /etc/firejail/disable-passwdmgr.inc | ||
8 | |||
9 | caps.drop all | ||
10 | net none | ||
11 | nogroups | ||
12 | nonewprivs | ||
13 | noroot | ||
14 | nosound | ||
15 | seccomp | ||
16 | shell none | ||
17 | tracelog | ||
18 | |||
19 | private-bin gnome-chess | ||
20 | private-dev | ||
diff --git a/etc/vlc.profile b/etc/vlc.profile index 1a6e5a151..c82247dd2 100644 --- a/etc/vlc.profile +++ b/etc/vlc.profile | |||
@@ -8,12 +8,12 @@ include /etc/firejail/disable-passwdmgr.inc | |||
8 | 8 | ||
9 | caps.drop all | 9 | caps.drop all |
10 | netfilter | 10 | netfilter |
11 | nogroups | ||
11 | nonewprivs | 12 | nonewprivs |
12 | noroot | 13 | noroot |
13 | protocol unix,inet,inet6 | 14 | protocol unix,inet,inet6 |
14 | seccomp | 15 | seccomp |
15 | |||
16 | |||
17 | # to test | ||
18 | shell none | 16 | shell none |
17 | tracelog | ||
18 | |||
19 | private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc | 19 | private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc |