aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@protonmail.com>2021-06-28 09:37:37 -0500
committerLibravatar GitHub <noreply@github.com>2021-06-28 09:37:37 -0500
commita3397a78d908c247ea7764f49174ea5df6950d54 (patch)
tree939b5a4b75245bc250c73d82844c10c63d00cf17 /etc
parentREADME update (diff)
parentRefactor bitwarden as electron redirect (follow-up) (diff)
downloadfirejail-a3397a78d908c247ea7764f49174ea5df6950d54.tar.gz
firejail-a3397a78d908c247ea7764f49174ea5df6950d54.tar.zst
firejail-a3397a78d908c247ea7764f49174ea5df6950d54.zip
Merge pull request #4332 from rusty-snake/bitwarden-electron
Refactor bitwarden as electron redirect
Diffstat (limited to 'etc')
-rw-r--r--etc/profile-a-l/bitwarden.profile41
1 files changed, 6 insertions, 35 deletions
diff --git a/etc/profile-a-l/bitwarden.profile b/etc/profile-a-l/bitwarden.profile
index bef25276d..ba2eb2ea7 100644
--- a/etc/profile-a-l/bitwarden.profile
+++ b/etc/profile-a-l/bitwarden.profile
@@ -6,54 +6,25 @@ include bitwarden.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9# Disabled until someone reported positive feedback
10ignore include whitelist-usr-share-common.inc
11
9ignore noexec /tmp 12ignore noexec /tmp
10 13
11noblacklist ${HOME}/.config/Bitwarden 14noblacklist ${HOME}/.config/Bitwarden
12 15
13include disable-common.inc
14include disable-devel.inc
15include disable-exec.inc
16include disable-interpreters.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19include disable-shell.inc 16include disable-shell.inc
20include disable-xdg.inc
21 17
22mkdir ${HOME}/.config/Bitwarden 18mkdir ${HOME}/.config/Bitwarden
23whitelist ${HOME}/.config/Bitwarden 19whitelist ${HOME}/.config/Bitwarden
24whitelist ${DOWNLOADS}
25include whitelist-common.inc
26include whitelist-var-common.inc
27 20
28apparmor
29caps.drop all
30machine-id 21machine-id
31netfilter
32no3d 22no3d
33nodvd
34nogroups
35noinput
36nonewprivs
37noroot
38nosound 23nosound
39notv 24
40nou2f
41novideo
42protocol unix,inet,inet6,netlink
43seccomp !chroot
44shell none
45#tracelog - breaks on Arch
46
47private-bin bitwarden
48private-cache
49?HAS_APPIMAGE: ignore private-dev 25?HAS_APPIMAGE: ignore private-dev
50private-dev
51private-etc alternatives,ca-certificates,crypto-policies,fonts,hosts,nsswitch.conf,pki,resolv.conf,ssl 26private-etc alternatives,ca-certificates,crypto-policies,fonts,hosts,nsswitch.conf,pki,resolv.conf,ssl
52private-opt Bitwarden 27private-opt Bitwarden
53private-tmp
54
55# breaks appindicator (tray) functionality
56# dbus-user none
57# dbus-system none
58 28
59#memory-deny-write-execute - breaks on Arch (see issue #1803) 29# Redirect
30include electron.profile