Merge pull request #979 from curiosity-seeker/master

Correct skanlite.profile

4 files changed, 17 insertions, 5 deletions

diff --git a/etc/VirtualBox.profile b/etc/VirtualBox.profile
new file mode 100644
index 000000000..ff0a4b6ef
--- /dev/null
+++ b/etc/VirtualBox.profile
@@ -0,0 +1 @@
+include /etc/firejail/virtualbox.profile
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 07814a704..efe5c850d 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -191,6 +191,7 @@ blacklist ${PATH}/mount.ecryptfs_private
 
 # other SUID binaries
 blacklist /usr/lib/virtualbox
+blacklist /usr/lib64/virtualbox
 
 # prevent lxterminal connecting to an existing lxterminal session
 blacklist /tmp/.lxterminal-socket*
diff --git a/etc/skanlite.profile b/etc/skanlite.profile
index 4dcfa64d9..667b775c8 100644
--- a/etc/skanlite.profile
+++ b/etc/skanlite.profile
@@ -11,10 +11,10 @@ nonewprivs
 noroot
 nosound
 shell none
-#seccomp
-protocol unix,inet,inet6
+seccomp
+# protocol unix,inet,inet6
 
-private-bin skanlite
+# private-bin skanlite
 # private-dev
 # private-tmp
 # private-etc
diff --git a/etc/virtualbox.profile b/etc/virtualbox.profile
index 36a1e0704..1e765b89b 100644
--- a/etc/virtualbox.profile
+++ b/etc/virtualbox.profile
@@ -1,12 +1,22 @@
-# VirtualBox profile
+# virtualbox profile
 noblacklist ${HOME}/.VirtualBox
 noblacklist ${HOME}/VirtualBox VMs
 noblacklist ${HOME}/.config/VirtualBox
-noblacklist /usr/bin/virtualbox
+
+mkdir ~/VirtualBox VMs
+whitelist ~/VirtualBox VMs
+mkdir ~/.config/VirtualBox
+whitelist ~/.config/VirtualBox
+
+# noblacklist /usr/bin/virtualbox
+noblacklist /usr/lib/virtualbox
+noblacklist /usr/lib64/virtualbox
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-programs.inc
 include /etc/firejail/disable-passwdmgr.inc
+include /etc/firejail/whitelist-common.inc
 
 caps.drop all
+netfilter