aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar Vladislav Nepogodin <nepogodin.vlad@gmail.com>2021-12-06 21:51:27 +0400
committerLibravatar Vladislav Nepogodin <nepogodin.vlad@gmail.com>2021-12-06 21:51:27 +0400
commit11740f889a8491c2d3aeaa97f967ddae5af888e8 (patch)
tree666e015d1ad93e9a595d7209124ebfa158bdef1b /etc
parentMerge pull request #4724 from WhyNotHugo/flatseal (diff)
downloadfirejail-11740f889a8491c2d3aeaa97f967ddae5af888e8.tar.gz
firejail-11740f889a8491c2d3aeaa97f967ddae5af888e8.tar.zst
firejail-11740f889a8491c2d3aeaa97f967ddae5af888e8.zip
Add new cachy-browser profile
Diffstat (limited to 'etc')
-rw-r--r--etc/inc/disable-programs.inc2
-rw-r--r--etc/profile-a-l/cachy-browser.profile57
2 files changed, 59 insertions, 0 deletions
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc
index 4e440de1e..5932481f7 100644
--- a/etc/inc/disable-programs.inc
+++ b/etc/inc/disable-programs.inc
@@ -85,6 +85,7 @@ blacklist ${HOME}/.cache/attic
85blacklist ${HOME}/.cache/babl 85blacklist ${HOME}/.cache/babl
86blacklist ${HOME}/.cache/bnox 86blacklist ${HOME}/.cache/bnox
87blacklist ${HOME}/.cache/borg 87blacklist ${HOME}/.cache/borg
88blacklist ${HOME}/.cache/cachy
88blacklist ${HOME}/.cache/calibre 89blacklist ${HOME}/.cache/calibre
89blacklist ${HOME}/.cache/cantata 90blacklist ${HOME}/.cache/cantata
90blacklist ${HOME}/.cache/champlain 91blacklist ${HOME}/.cache/champlain
@@ -223,6 +224,7 @@ blacklist ${HOME}/.cache/youtube-dl
223blacklist ${HOME}/.cache/youtube-viewer 224blacklist ${HOME}/.cache/youtube-viewer
224blacklist ${HOME}/.cache/yt-dlp 225blacklist ${HOME}/.cache/yt-dlp
225blacklist ${HOME}/.cache/zim 226blacklist ${HOME}/.cache/zim
227blacklist ${HOME}/.cachy
226blacklist ${HOME}/.cargo 228blacklist ${HOME}/.cargo
227blacklist ${HOME}/.claws-mail 229blacklist ${HOME}/.claws-mail
228blacklist ${HOME}/.clion* 230blacklist ${HOME}/.clion*
diff --git a/etc/profile-a-l/cachy-browser.profile b/etc/profile-a-l/cachy-browser.profile
new file mode 100644
index 000000000..9d158b5f8
--- /dev/null
+++ b/etc/profile-a-l/cachy-browser.profile
@@ -0,0 +1,57 @@
1# Firejail profile for Cachy-Browser
2# Description: Librewolf fork based on enhanced privacy with gentoo patchset
3# This file is overwritten after every install/update
4# Persistent local customizations
5include cachy-browser.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.cache/cachy
10noblacklist ${HOME}/.cachy
11
12mkdir ${HOME}/.cache/cachy
13mkdir ${HOME}/.cachy
14whitelist ${HOME}/.cache/cachy
15whitelist ${HOME}/.cachy
16
17# Add the next lines to your cachy-browser.local if you want to use the migration wizard.
18#noblacklist ${HOME}/.mozilla
19#whitelist ${HOME}/.mozilla
20
21# To enable KeePassXC Plugin add one of the following lines to your cachy-browser.local.
22# NOTE: start KeePassXC before CachyBrowser and keep it open to allow communication between them.
23#whitelist ${RUNUSER}/kpxc_server
24#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer
25
26whitelist /usr/share/doc
27whitelist /usr/share/gtk-doc/html
28whitelist /usr/share/mozilla
29whitelist /usr/share/webext
30include whitelist-usr-share-common.inc
31
32# Add the next line to your cachy-browser.local to enable private-bin (Arch Linux).
33#private-bin dbus-launch,dbus-send,cachy-browser,sh
34# Add the next line to your cachy-browser.local to enable private-etc.
35# NOTE: private-etc must first be enabled in firefox-common.local.
36#private-etc cachy-browser
37
38dbus-user filter
39# Add the next line to your cachy-browser.local to enable native notifications.
40#dbus-user.talk org.freedesktop.Notifications
41# Add the next line to your cachy-browser.local to allow inhibiting screensavers.
42#dbus-user.talk org.freedesktop.ScreenSaver
43# Add the next lines to your cachy-browser.local for plasma browser integration.
44#dbus-user.own org.mpris.MediaPlayer2.plasma-browser-integration
45#dbus-user.talk org.kde.JobViewServer
46#dbus-user.talk org.kde.kuiserver
47# Add the next three lines to your cachy-browser.local to allow screensharing under Wayland.
48#whitelist ${RUNUSER}/pipewire-0
49#whitelist /usr/share/pipewire/client.conf
50#dbus-user.talk org.freedesktop.portal.*
51# Also add the next line to your cachy-browser.local if screensharing does not work with
52# the above lines (depends on the portal implementation).
53#ignore noroot
54ignore dbus-user none
55
56# Redirect
57include firefox-common.profile