aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2020-03-20 11:16:00 +0100
committerLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2020-03-22 13:20:55 +0100
commit05819c05840054cb587b8d307b51b1273df55e9e (patch)
tree18f9e1cf8aac7a1da1b73b5601af08994167b1d1 /etc
parentiagno profile (diff)
downloadfirejail-05819c05840054cb587b8d307b51b1273df55e9e.tar.gz
firejail-05819c05840054cb587b8d307b51b1273df55e9e.tar.zst
firejail-05819c05840054cb587b8d307b51b1273df55e9e.zip
new profiles: agenda, gnome-pomodoro, gnome-todo
rules for xdg-dbus-proxy: dbus-user filter dbus-user.own org.gnome.Pomodoro dbus-user.talk ca.desrt.dconf dbus-user.talk org.gnome.Shell dbus-system none dbus-user filter dbus-user.own org.gnome.Todo dbus-user.talk ca.desrt.dconf dbus-user.talk org.gnome.evolution.dataserver.AddressBook9 dbus-user.talk org.gnome.evolution.dataserver.Calendar8 dbus-user.talk org.gnome.evolution.dataserver.Sources5 dbus-user.talk org.gnome.evolution.dataserver.Subprocess.Backend.* dbus-user.talk org.gnome.OnlineAccounts dbus-user.talk org.gnome.SettingsDaemon.Color dbus-system filter dbus-system.talk org.freedesktop.login1 dbus-user filter dbus.own com.github.dahenson.agenda dbus.talk ca.desrt.dconf dbus-system block
Diffstat (limited to 'etc')
-rw-r--r--etc/com.github.dahenson.agenda.profile60
-rw-r--r--etc/disable-programs.inc4
-rw-r--r--etc/gnome-pomodoro.profile51
-rw-r--r--etc/gnome-todo.profile51
-rw-r--r--etc/lrzuntar.profile1
5 files changed, 166 insertions, 1 deletions
diff --git a/etc/com.github.dahenson.agenda.profile b/etc/com.github.dahenson.agenda.profile
new file mode 100644
index 000000000..ea5370649
--- /dev/null
+++ b/etc/com.github.dahenson.agenda.profile
@@ -0,0 +1,60 @@
1# Firejail profile for com.github.dahenson.agenda
2# Description: Simple, fast, no-nonsense to-do (task) list
3# This file is overwritten after every install/update
4# Persistent local customizations
5include com.github.dahenson.agenda.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.cache/agenda
10noblacklist ${HOME}/.config/agenda
11noblacklist ${HOME}/.local/share/agenda
12
13include disable-common.inc
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19include disable-xdg.inc
20
21mkdir ${HOME}/.cache/agenda
22mkdir ${HOME}/.config/agenda
23mkdir ${HOME}/.local/share/agenda
24whitelist ${HOME}/.cache/agenda
25whitelist ${HOME}/.config/agenda
26whitelist ${HOME}/.local/share/agenda
27include whitelist-common.inc
28include whitelist-usr-share-common.inc
29include whitelist-runuser-common.inc
30include whitelist-var-common.inc
31
32apparmor
33caps.drop all
34machine-id
35net none
36no3d
37nodvd
38nogroups
39nonewprivs
40noroot
41nosound
42notv
43nou2f
44novideo
45protocol unix
46seccomp
47shell none
48tracelog
49
50disable-mnt
51private-bin com.github.dahenson.agenda
52private-cache
53private-dev
54private-etc dconf,fonts,gtk-3.0
55private-tmp
56
57read-only ${HOME}
58read-write ${HOME}/.cache/agenda
59read-write ${HOME}/.config/agenda
60read-write ${HOME}/.local/share/agenda
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index b54c1cce3..0b00947f5 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -116,6 +116,7 @@ blacklist ${HOME}/.config/Thunar
116blacklist ${HOME}/.config/VirtualBox 116blacklist ${HOME}/.config/VirtualBox
117blacklist ${HOME}/.config/Wire 117blacklist ${HOME}/.config/Wire
118blacklist ${HOME}/.config/Zeal 118blacklist ${HOME}/.config/Zeal
119blacklist ${HOME}/.config/agenda
119blacklist ${HOME}/.config/akonadi* 120blacklist ${HOME}/.config/akonadi*
120blacklist ${HOME}/.config/akregatorrc 121blacklist ${HOME}/.config/akregatorrc
121blacklist ${HOME}/.config/ardour4 122blacklist ${HOME}/.config/ardour4
@@ -497,6 +498,7 @@ blacklist ${HOME}/.local/share/TpLogger
497blacklist ${HOME}/.local/share/Zeal 498blacklist ${HOME}/.local/share/Zeal
498blacklist ${HOME}/.local/share/akonadi* 499blacklist ${HOME}/.local/share/akonadi*
499blacklist ${HOME}/.local/share/akregator 500blacklist ${HOME}/.local/share/akregator
501blacklist ${HOME}/.local/share/agenda
500blacklist ${HOME}/.local/share/apps/korganizer 502blacklist ${HOME}/.local/share/apps/korganizer
501blacklist ${HOME}/.local/share/aspyr-media 503blacklist ${HOME}/.local/share/aspyr-media
502blacklist ${HOME}/.local/share/autokey 504blacklist ${HOME}/.local/share/autokey
@@ -534,6 +536,7 @@ blacklist ${HOME}/.local/share/gnome-builder
534blacklist ${HOME}/.local/share/gnome-latex 536blacklist ${HOME}/.local/share/gnome-latex
535blacklist ${HOME}/.local/share/gnome-music 537blacklist ${HOME}/.local/share/gnome-music
536blacklist ${HOME}/.local/share/gnome-photos 538blacklist ${HOME}/.local/share/gnome-photos
539blacklist ${HOME}/.local/share/gnome-pomodoro
537blacklist ${HOME}/.local/share/gnome-recipes 540blacklist ${HOME}/.local/share/gnome-recipes
538blacklist ${HOME}/.local/share/gnome-ring 541blacklist ${HOME}/.local/share/gnome-ring
539blacklist ${HOME}/.local/share/gnome-twitch 542blacklist ${HOME}/.local/share/gnome-twitch
@@ -729,6 +732,7 @@ blacklist ${HOME}/.cache/MusicBrainz
729blacklist ${HOME}/.cache/QuiteRss 732blacklist ${HOME}/.cache/QuiteRss
730blacklist ${HOME}/.cache/Tox 733blacklist ${HOME}/.cache/Tox
731blacklist ${HOME}/.cache/Zeal 734blacklist ${HOME}/.cache/Zeal
735blacklist ${HOME}/.cache/agenda
732blacklist ${HOME}/.cache/akonadi* 736blacklist ${HOME}/.cache/akonadi*
733blacklist ${HOME}/.cache/atril 737blacklist ${HOME}/.cache/atril
734blacklist ${HOME}/.cache/attic 738blacklist ${HOME}/.cache/attic
diff --git a/etc/gnome-pomodoro.profile b/etc/gnome-pomodoro.profile
new file mode 100644
index 000000000..f8be23f07
--- /dev/null
+++ b/etc/gnome-pomodoro.profile
@@ -0,0 +1,51 @@
1# Firejail profile for gnome-pomodoro
2# Description: time management utility for GNOME based on the pomodoro technique
3# This file is overwritten after every install/update
4# Persistent local customizations
5include gnome-pomodoro.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.local/share/gnome-pomodoro
10
11include disable-common.inc
12include disable-devel.inc
13include disable-exec.inc
14include disable-interpreters.inc
15include disable-passwdmgr.inc
16include disable-programs.inc
17include disable-xdg.inc
18
19mkdir ${HOME}/.local/share/gnome-pomodoro
20whitelist ${HOME}/.local/share/gnome-pomodoro
21whitelist /usr/share/gnome-pomodoro
22include whitelist-common.inc
23include whitelist-usr-share-common.inc
24include whitelist-runuser-common.inc
25include whitelist-var-common.inc
26
27apparmor
28caps.drop all
29net none
30no3d
31nodvd
32nogroups
33nonewprivs
34noroot
35notv
36nou2f
37novideo
38protocol unix
39seccomp
40shell none
41tracelog
42
43disable-mnt
44private-bin gnome-pomodoro
45private-cache
46private-dev
47private-etc dconf,fonts,gtk-3.0,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,machine-id
48private-tmp
49
50read-only ${HOME}
51read-write ${HOME}/.local/share/gnome-pomodoro
diff --git a/etc/gnome-todo.profile b/etc/gnome-todo.profile
new file mode 100644
index 000000000..6240cce65
--- /dev/null
+++ b/etc/gnome-todo.profile
@@ -0,0 +1,51 @@
1# Firejail profile for gnome-todo
2# Description: Personal task manager for GNOME
3# This file is overwritten after every install/update
4# Persistent local customizations
5include gnome-todo.local
6# Persistent global definitions
7include globals.local
8
9# Allow python (blacklisted by disable-interpreters.inc)
10include allow-python3.inc
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18include disable-xdg.inc
19
20whitelist /usr/share/gnome-todo
21include whitelist-common.inc
22include whitelist-usr-share-common.inc
23include whitelist-runuser-common.inc
24include whitelist-var-common.inc
25
26apparmor
27caps.drop all
28machine-id
29net none
30nodvd
31nogroups
32nonewprivs
33noroot
34nosound
35notv
36nou2f
37novideo
38protocol unix
39seccomp
40shell none
41tracelog
42
43disable-mnt
44#private
45private-bin gnome-todo
46private-cache
47private-dev
48private-etc dconf,fonts,gtk-3.0,localtime,passwd,xdg
49private-tmp
50
51read-only ${HOME}
diff --git a/etc/lrzuntar.profile b/etc/lrzuntar.profile
index 17215a5d7..245d1c669 100644
--- a/etc/lrzuntar.profile
+++ b/etc/lrzuntar.profile
@@ -7,7 +7,6 @@ include lrzuntar.local
7# Persistent global definitions 7# Persistent global definitions
8# added by included profile 8# added by included profile
9#include globals.local 9#include globals.local
10quiet
11 10
12# Redirect 11# Redirect
13include cpio.profile 12include cpio.profile
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-19 18:19:37 +0000