aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2019-03-05 07:06:21 +0000
committerLibravatar GitHub <noreply@github.com>2019-03-05 07:06:21 +0000
commite934c66dba83d30fbfdbe16c8d64406f6c2e6bd3 (patch)
tree359737ade1acf082e0970b74239faa8689f7654d /etc
parentdirect link for new profile requests (diff)
downloadfirejail-e934c66dba83d30fbfdbe16c8d64406f6c2e6bd3.tar.gz
firejail-e934c66dba83d30fbfdbe16c8d64406f6c2e6bd3.tar.zst
firejail-e934c66dba83d30fbfdbe16c8d64406f6c2e6bd3.zip
Refactor Transmission profiles (#2516)
* Harden transmission-cli.profile * Harden transmission-gtk.profile * Harden transmission-qt.profile * Harden transmission-show.profile * Create transmission-create.profile * Create transmission-daemon.profile * Create transmission-edit.profile * Create transmission-remote.profile * Create transmission-remote-cli.profile * Create transmission-remote-gtk.profile * Fix spacing in transmission-remote-cli.profile * Add transmission-daemon to firecfg
Diffstat (limited to 'etc')
-rw-r--r--etc/transmission-cli.profile11
-rw-r--r--etc/transmission-create.profile12
-rw-r--r--etc/transmission-daemon.profile45
-rw-r--r--etc/transmission-edit.profile12
-rw-r--r--etc/transmission-gtk.profile4
-rw-r--r--etc/transmission-qt.profile4
-rw-r--r--etc/transmission-remote-cli.profile28
-rw-r--r--etc/transmission-remote-gtk.profile21
-rw-r--r--etc/transmission-remote.profile44
-rw-r--r--etc/transmission-show.profile7
10 files changed, 183 insertions, 5 deletions
diff --git a/etc/transmission-cli.profile b/etc/transmission-cli.profile
index 89b9b21dc..65682df52 100644
--- a/etc/transmission-cli.profile
+++ b/etc/transmission-cli.profile
@@ -1,5 +1,5 @@
1# Firejail profile for transmission-cli 1# Firejail profile for transmission-cli
2# Description: Lightweight BitTorrent client 2# Description: Fast, easy and free BitTorrent client (CLI tools and web client)
3# This file is overwritten after every install/update 3# This file is overwritten after every install/update
4quiet 4quiet
5# Persistent local customizations 5# Persistent local customizations
@@ -16,9 +16,11 @@ include disable-interpreters.inc
16include disable-passwdmgr.inc 16include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18 18
19apparmor
19caps.drop all 20caps.drop all
20machine-id 21machine-id
21netfilter 22netfilter
23nodbus
22nodvd 24nodvd
23nonewprivs 25nonewprivs
24noroot 26noroot
@@ -26,14 +28,17 @@ nosound
26notv 28notv
27nou2f 29nou2f
28novideo 30novideo
29protocol unix,inet,inet6 31protocol inet,inet6
30seccomp 32seccomp
31shell none 33shell none
32tracelog 34tracelog
33 35
34# private-bin transmission-cli 36# private-bin transmission-cli
35private-dev 37private-dev
36private-etc alternatives,ca-certificates,ssl,pki,crypto-policies 38private-etc alternatives,ca-certificates,crypto-policies,nsswitch.conf,pki,resolv.conf,ssl
39private-lib
37private-tmp 40private-tmp
38 41
39memory-deny-write-execute 42memory-deny-write-execute
43noexec ${HOME}
44noexec /tmp
diff --git a/etc/transmission-create.profile b/etc/transmission-create.profile
new file mode 100644
index 000000000..7aea44c3b
--- /dev/null
+++ b/etc/transmission-create.profile
@@ -0,0 +1,12 @@
1# Firejail profile for transmission-create
2# Description: CLI utility to create BitTorrent .torrent files
3# This file is overwritten after every install/update
4# Persistent local customizations
5include transmission-create.local
6# Persistent global definitions
7# added by included profile
8#include globals.local
9
10
11# Redirect
12include transmission-cli.profile
diff --git a/etc/transmission-daemon.profile b/etc/transmission-daemon.profile
new file mode 100644
index 000000000..c101e18b5
--- /dev/null
+++ b/etc/transmission-daemon.profile
@@ -0,0 +1,45 @@
1# Firejail profile for transmission-daemon
2# Description: Fast, easy and free BitTorrent client (daemon)
3# This file is overwritten after every install/update
4quiet
5# Persistent local customizations
6include transmission-daemon.local
7# Persistent global definitions
8include globals.local
9
10noblacklist ${HOME}/.cache/transmission
11noblacklist ${HOME}/.config/transmission
12
13include disable-common.inc
14include disable-devel.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18
19apparmor
20caps.drop all
21machine-id
22netfilter
23nodbus
24nodvd
25nogroups
26nonewprivs
27noroot
28nosound
29notv
30nou2f
31novideo
32protocol inet,inet6
33seccomp
34shell none
35tracelog
36
37# private-bin transmission-daemon
38private-dev
39private-etc alternatives,ca-certificates,crypto-policies,nsswitch.conf,pki,resolv.conf,ssl
40private-lib
41private-tmp
42
43memory-deny-write-execute
44noexec ${HOME}
45noexec /tmp
diff --git a/etc/transmission-edit.profile b/etc/transmission-edit.profile
new file mode 100644
index 000000000..5bc81c231
--- /dev/null
+++ b/etc/transmission-edit.profile
@@ -0,0 +1,12 @@
1# Firejail profile for transmission-edit
2# Description: CLI utility to modify BitTorrent .torrent files' announce URLs
3# This file is overwritten after every install/update
4# Persistent local customizations
5include transmission-edit.local
6# Persistent global definitions
7# added by included profile
8#include globals.local
9
10
11# Redirect
12include transmission-cli.profile
diff --git a/etc/transmission-gtk.profile b/etc/transmission-gtk.profile
index 00de26003..6fd310a73 100644
--- a/etc/transmission-gtk.profile
+++ b/etc/transmission-gtk.profile
@@ -1,5 +1,5 @@
1# Firejail profile for transmission-gtk 1# Firejail profile for transmission-gtk
2# Description: Lightweight BitTorrent client 2# Description: Fast, easy and free BitTorrent client (GTK GUI)
3# This file is overwritten after every install/update 3# This file is overwritten after every install/update
4# Persistent local customizations 4# Persistent local customizations
5include transmission-gtk.local 5include transmission-gtk.local
@@ -47,3 +47,5 @@ private-tmp
47 47
48# Causes freeze during opening file dialog in Archlinux, see issue #1855 48# Causes freeze during opening file dialog in Archlinux, see issue #1855
49# memory-deny-write-execute 49# memory-deny-write-execute
50noexec ${HOME}
51noexec /tmp
diff --git a/etc/transmission-qt.profile b/etc/transmission-qt.profile
index 96d9b4bb0..f35eb0036 100644
--- a/etc/transmission-qt.profile
+++ b/etc/transmission-qt.profile
@@ -1,5 +1,5 @@
1# Firejail profile for transmission-qt 1# Firejail profile for transmission-qt
2# Description: Lightweight BitTorrent client 2# Description: Fast, easy and free BitTorrent client (Qt GUI)
3# This file is overwritten after every install/update 3# This file is overwritten after every install/update
4# Persistent local customizations 4# Persistent local customizations
5include transmission-qt.local 5include transmission-qt.local
@@ -46,3 +46,5 @@ private-dev
46private-tmp 46private-tmp
47 47
48# memory-deny-write-execute - problems on Qt 5.10.0, KDE Frameworks 5.41.0 48# memory-deny-write-execute - problems on Qt 5.10.0, KDE Frameworks 5.41.0
49noexec ${HOME}
50noexec /tmp
diff --git a/etc/transmission-remote-cli.profile b/etc/transmission-remote-cli.profile
new file mode 100644
index 000000000..a2e950176
--- /dev/null
+++ b/etc/transmission-remote-cli.profile
@@ -0,0 +1,28 @@
1# Firejail profile for transmission-remote-cli
2# Description: A remote control utility for transmission-daemon (CLI)
3# This file is overwritten after every install/update
4# Persistent local customizations
5include transmission-remote-cli.local
6# Persistent global definitions
7# added by included profile
8#include globals.local
9
10# Allow python (disabled by disable-interpreters.inc)
11noblacklist ${PATH}/python2*
12noblacklist ${PATH}/python3*
13noblacklist /usr/lib/python2*
14noblacklist /usr/lib/python3*
15
16mkdir ${HOME}/.cache/transmission
17mkdir ${HOME}/.config/transmission
18whitelist ${HOME}/.cache/transmission
19whitelist ${HOME}/.config/transmission
20include whitelist-common.inc
21include whitelist-var-common.inc
22
23# private-bin python*
24private-etc fonts
25
26
27# Redirect
28include transmission-remote.profile
diff --git a/etc/transmission-remote-gtk.profile b/etc/transmission-remote-gtk.profile
new file mode 100644
index 000000000..3ead56008
--- /dev/null
+++ b/etc/transmission-remote-gtk.profile
@@ -0,0 +1,21 @@
1# Firejail profile for transmission-remote-gtk
2# Description: A remote control utility for transmission-daemon (GTK GUI)
3# This file is overwritten after every install/update
4# Persistent local customizations
5include transmission-remote-gtk.local
6# Persistent global definitions
7# added by included profile
8#include globals.local
9
10mkdir ${HOME}/.cache/transmission
11mkdir ${HOME}/.config/transmission
12whitelist ${HOME}/.cache/transmission
13whitelist ${HOME}/.config/transmission
14include whitelist-common.inc
15include whitelist-var-common.inc
16
17private-etc fonts
18
19
20# Redirect
21include transmission-remote.profile
diff --git a/etc/transmission-remote.profile b/etc/transmission-remote.profile
new file mode 100644
index 000000000..7e6f67317
--- /dev/null
+++ b/etc/transmission-remote.profile
@@ -0,0 +1,44 @@
1# Firejail profile for transmission-remote
2# Description: A remote control utility for transmission-daemon (CLI)
3# This file is overwritten after every install/update
4quiet
5# Persistent local customizations
6include transmission-remote.local
7# Persistent global definitions
8include globals.local
9
10noblacklist ${HOME}/.cache/transmission
11noblacklist ${HOME}/.config/transmission
12
13include disable-common.inc
14include disable-devel.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18
19apparmor
20caps.drop all
21machine-id
22net none
23nodbus
24nodvd
25nonewprivs
26noroot
27nosound
28notv
29nou2f
30novideo
31protocol unix
32seccomp
33shell none
34tracelog
35
36# private-bin transmission-remote
37private-dev
38private-etc alternatives
39private-lib
40private-tmp
41
42memory-deny-write-execute
43noexec ${HOME}
44noexec /tmp
diff --git a/etc/transmission-show.profile b/etc/transmission-show.profile
index 6154ad15b..691b8959e 100644
--- a/etc/transmission-show.profile
+++ b/etc/transmission-show.profile
@@ -1,4 +1,5 @@
1# Firejail profile for transmission-show 1# Firejail profile for transmission-show
2# Description: CLI utility to show BitTorrent .torrent file metadata
2# This file is overwritten after every install/update 3# This file is overwritten after every install/update
3# Persistent local customizations 4# Persistent local customizations
4include transmission-show.local 5include transmission-show.local
@@ -14,6 +15,7 @@ include disable-interpreters.inc
14include disable-passwdmgr.inc 15include disable-passwdmgr.inc
15include disable-programs.inc 16include disable-programs.inc
16 17
18apparmor
17caps.drop all 19caps.drop all
18machine-id 20machine-id
19net none 21net none
@@ -32,4 +34,9 @@ tracelog
32 34
33private-dev 35private-dev
34private-etc alternatives 36private-etc alternatives
37private-lib
35private-tmp 38private-tmp
39
40memory-deny-write-execute
41noexec ${HOME}
42noexec /tmp
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-10 23:35:08 +0000