aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2017-04-24 20:39:23 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2017-04-24 20:39:23 -0400
commitbc257b6a4cdd0d335d744a0e70d06cef0c81ea26 (patch)
tree777f5c8558eba98704003f9d0ee7db833cc6a9da /etc
parentfcopy - no checking for group in order to fix files such as /usr/bin/mutt_do... (diff)
downloadfirejail-bc257b6a4cdd0d335d744a0e70d06cef0c81ea26.tar.gz
firejail-bc257b6a4cdd0d335d744a0e70d06cef0c81ea26.tar.zst
firejail-bc257b6a4cdd0d335d744a0e70d06cef0c81ea26.zip
added akregator, kcalc and ktorrent profiles
Diffstat (limited to 'etc')
-rw-r--r--etc/akregator.profile30
-rw-r--r--etc/disable-programs.inc4
-rw-r--r--etc/kcalc.profile29
-rw-r--r--etc/ktorrent.profile30
4 files changed, 93 insertions, 0 deletions
diff --git a/etc/akregator.profile b/etc/akregator.profile
new file mode 100644
index 000000000..c99153450
--- /dev/null
+++ b/etc/akregator.profile
@@ -0,0 +1,30 @@
1# This file is overwritten during software install.
2# Persistent customizations should go in a .local file.
3include /etc/firejail/akregator.local
4
5################################
6# Generic GUI application profile
7################################
8noblacklist ${HOME}/.config/akregatorrc
9noblacklist ${HOME}/.local/share/akregator
10include /etc/firejail/disable-common.inc
11include /etc/firejail/disable-programs.inc
12include /etc/firejail/disable-passwdmgr.inc
13
14caps.drop all
15netfilter
16nonewprivs
17noroot
18protocol unix,inet,inet6
19seccomp
20
21#
22# depending on you usage, you can enable some of the commands below:
23#
24# nogroups
25# shell none
26# private-bin program
27# private-etc none
28# private-dev
29# private-tmp
30
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 32adac298..fbe614b0d 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -21,6 +21,7 @@ blacklist ${HOME}/.bcast5
21blacklist ${HOME}/.bibletime 21blacklist ${HOME}/.bibletime
22blacklist ${HOME}/.claws-mail 22blacklist ${HOME}/.claws-mail
23blacklist ${HOME}/.config/0ad 23blacklist ${HOME}/.config/0ad
24blacklist ${HOME}/.config/akregatorrc
24blacklist ${HOME}/.config/Atom 25blacklist ${HOME}/.config/Atom
25blacklist ${HOME}/.config/Audaciousrc 26blacklist ${HOME}/.config/Audaciousrc
26blacklist ${HOME}/.config/Brackets 27blacklist ${HOME}/.config/Brackets
@@ -179,6 +180,7 @@ blacklist ${HOME}/.kde4/share/config/konqsidebartngrc
179blacklist ${HOME}/.kde4/share/config/konquerorrc 180blacklist ${HOME}/.kde4/share/config/konquerorrc
180blacklist ${HOME}/.kde4/share/config/okularpartrc 181blacklist ${HOME}/.kde4/share/config/okularpartrc
181blacklist ${HOME}/.kde4/share/config/okularrc 182blacklist ${HOME}/.kde4/share/config/okularrc
183blacklist ${HOME}/.kde4/share/config/ktorrentrc
182blacklist ${HOME}/.kde/share/apps/gwenview 184blacklist ${HOME}/.kde/share/apps/gwenview
183blacklist ${HOME}/.kde/share/apps/kcookiejar 185blacklist ${HOME}/.kde/share/apps/kcookiejar
184blacklist ${HOME}/.kde/share/apps/khtml 186blacklist ${HOME}/.kde/share/apps/khtml
@@ -196,6 +198,7 @@ blacklist ${HOME}/.kde/share/config/konqsidebartngrc
196blacklist ${HOME}/.kde/share/config/konquerorrc 198blacklist ${HOME}/.kde/share/config/konquerorrc
197blacklist ${HOME}/.kde/share/config/okularpartrc 199blacklist ${HOME}/.kde/share/config/okularpartrc
198blacklist ${HOME}/.kde/share/config/okularrc 200blacklist ${HOME}/.kde/share/config/okularrc
201blacklist ${HOME}/.kde/share/config/ktorrentrc
199blacklist ${HOME}/.killingfloor 202blacklist ${HOME}/.killingfloor
200blacklist ${HOME}/.kino-history 203blacklist ${HOME}/.kino-history
201blacklist ${HOME}/.kinorc 204blacklist ${HOME}/.kinorc
@@ -207,6 +210,7 @@ blacklist ${HOME}/.local/.share/maps-places.json
207blacklist ${HOME}/.local/lib/python2.7/site-packages 210blacklist ${HOME}/.local/lib/python2.7/site-packages
208blacklist ${HOME}/.local/share/0ad 211blacklist ${HOME}/.local/share/0ad
209blacklist ${HOME}/.local/share/3909/PapersPlease 212blacklist ${HOME}/.local/share/3909/PapersPlease
213blacklist ${HOME}/.local/share/akregator
210blacklist ${HOME}/.local/share/Empathy 214blacklist ${HOME}/.local/share/Empathy
211blacklist ${HOME}/.local/share/Mumble 215blacklist ${HOME}/.local/share/Mumble
212blacklist ${HOME}/.local/share/QuiteRss 216blacklist ${HOME}/.local/share/QuiteRss
diff --git a/etc/kcalc.profile b/etc/kcalc.profile
new file mode 100644
index 000000000..88f84fdf6
--- /dev/null
+++ b/etc/kcalc.profile
@@ -0,0 +1,29 @@
1# This file is overwritten during software install.
2# Persistent customizations should go in a .local file.
3include /etc/firejail/kcalc.local
4
5################################
6# Generic GUI application profile
7################################
8include /etc/firejail/disable-common.inc
9include /etc/firejail/disable-programs.inc
10include /etc/firejail/disable-passwdmgr.inc
11
12caps.drop all
13netfilter
14nonewprivs
15noroot
16protocol unix,inet,inet6
17seccomp
18
19#
20# depending on you usage, you can enable some of the commands below:
21#
22private
23nogroups
24shell none
25# private-bin program
26# private-etc none
27private-dev
28private-tmp
29
diff --git a/etc/ktorrent.profile b/etc/ktorrent.profile
new file mode 100644
index 000000000..f1a5d995d
--- /dev/null
+++ b/etc/ktorrent.profile
@@ -0,0 +1,30 @@
1# This file is overwritten during software install.
2# Persistent customizations should go in a .local file.
3include /etc/firejail/ktorrent.local
4
5################################
6# Generic GUI application profile
7################################
8blacklist ${HOME}/.kde/share/config/ktorrentrc
9blacklist ${HOME}/.kde4/share/config/ktorrentrc
10include /etc/firejail/disable-common.inc
11include /etc/firejail/disable-programs.inc
12include /etc/firejail/disable-passwdmgr.inc
13
14caps.drop all
15netfilter
16nonewprivs
17noroot
18protocol unix,inet,inet6
19seccomp
20
21#
22# depending on you usage, you can enable some of the commands below:
23#
24nogroups
25shell none
26# private-bin program
27# private-etc none
28private-dev
29# private-tmp
30
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-18 17:18:10 +0000