diff options
| author |  Fred-Barclay <Fred-Barclay@users.noreply.github.com> | 2016-04-14 00:25:05 +1000 |
|---|---|---|
| committer | Fred-Barclay <Fred-Barclay@users.noreply.github.com> | 2016-04-14 00:25:05 +1000 |
| commit | 54a368fe7d039cacb4d29568e49735a06437d80c (patch) | |
| tree | 771a55340e91b689cf762fa55b61525c71cc8a45 /etc | |
| parent | profile fixes (diff) | |
| download | firejail-54a368fe7d039cacb4d29568e49735a06437d80c.tar.gz firejail-54a368fe7d039cacb4d29568e49735a06437d80c.tar.zst firejail-54a368fe7d039cacb4d29568e49735a06437d80c.zip | |
separated profiles
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/icedove.profile | 20 | ||||
| -rw-r--r-- | etc/thunderbird.profile | 10 |
2 files changed, 19 insertions, 11 deletions
diff --git a/etc/icedove.profile b/etc/icedove.profile index 057e0c9ef..2592e59df 100644 --- a/etc/icedove.profile +++ b/etc/icedove.profile | |||
| @@ -1,3 +1,19 @@ | |||
| 1 | # Firejail profile for Mozilla Thunderbird (Icedove in Debian) | 1 | # Firejail profile for Mozilla Thunderbird (Icedove in Debian Stable) |
| 2 | include /etc/firejail/thunderbird.profile | 2 | # Users have thunderbird set to open a browser by clicking a link in an email |
| 3 | # We are not allowed to blacklist browser-specific directories | ||
| 4 | |||
| 5 | noblacklist ~/.gnupg | ||
| 6 | mkdir ~/.gnupg | ||
| 7 | whitelist ~/.gnupg | ||
| 8 | |||
| 9 | noblacklist ~/.icedove | ||
| 10 | mkdir ~/.icedove | ||
| 11 | whitelist ~/.icedove | ||
| 12 | |||
| 13 | noblacklist ~/.cache/icedove | ||
| 14 | mkdir ~/.cache | ||
| 15 | mkdir ~/.cache/icedove | ||
| 16 | whitelist ~/.cache/icedove | ||
| 17 | |||
| 18 | include /etc/firejail/firefox.profile | ||
| 3 | 19 | ||
diff --git a/etc/thunderbird.profile b/etc/thunderbird.profile index 42647b1e5..7882367b9 100644 --- a/etc/thunderbird.profile +++ b/etc/thunderbird.profile | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | # Firejail profile for Mozilla Thunderbird (Icedove in Debian) | 1 | # Firejail profile for Mozilla Thunderbird |
| 2 | # Users have thunderbird set to open a browser by clicking a link in an email | 2 | # Users have thunderbird set to open a browser by clicking a link in an email |
| 3 | # We are not allowed to blacklist browser-specific directories | 3 | # We are not allowed to blacklist browser-specific directories |
| 4 | 4 | ||
| @@ -6,10 +6,6 @@ noblacklist ~/.gnupg | |||
| 6 | mkdir ~/.gnupg | 6 | mkdir ~/.gnupg |
| 7 | whitelist ~/.gnupg | 7 | whitelist ~/.gnupg |
| 8 | 8 | ||
| 9 | noblacklist ~/.icedove | ||
| 10 | mkdir ~/.icedove | ||
| 11 | whitelist ~/.icedove | ||
| 12 | |||
| 13 | noblacklist ~/.thunderbird | 9 | noblacklist ~/.thunderbird |
| 14 | mkdir ~/.thunderbird | 10 | mkdir ~/.thunderbird |
| 15 | whitelist ~/.thunderbird | 11 | whitelist ~/.thunderbird |
| @@ -19,9 +15,5 @@ mkdir ~/.cache | |||
| 19 | mkdir ~/.cache/thunderbird | 15 | mkdir ~/.cache/thunderbird |
| 20 | whitelist ~/.cache/thunderbird | 16 | whitelist ~/.cache/thunderbird |
| 21 | 17 | ||
| 22 | noblacklist ~/.cache/icedove | ||
| 23 | mkdir ~/.cache/icedove | ||
| 24 | whitelist ~/.cache/icedove | ||
| 25 | |||
| 26 | include /etc/firejail/firefox.profile | 18 | include /etc/firejail/firefox.profile |
| 27 | 19 | ||