Cleanup

author: Tad <tad@spotco.us> 2017-04-15 16:13:13 -0400
committer: Tad <tad@spotco.us> 2017-04-15 16:13:13 -0400
commit: ba934b70f9ba0ba5ec10275f007fd784b16da91c (patch)
tree: b626f4d5b0f5bae49410dc72b185c32727b9c2e9 /etc
parent: Harden 19 more profiles (diff)
download: firejail-ba934b70f9ba0ba5ec10275f007fd784b16da91c.tar.gz
firejail-ba934b70f9ba0ba5ec10275f007fd784b16da91c.tar.zst
firejail-ba934b70f9ba0ba5ec10275f007fd784b16da91c.zip
6 files changed, 8 insertions, 14 deletions
diff --git a/etc/bless.profile b/etc/bless.profile
index ac4c08fb0..869f13cc0 100644
--- a/etc/bless.profile
+++ b/etc/bless.profile
@@ -19,9 +19,11 @@ include /etc/firejail/disable-devel.inc
 caps.drop all
 net none
 netfilter
+no3d
 nogroups
 nonewprivs
 noroot
+nosound
 protocol unix           
 seccomp
 shell none
@@ -32,6 +34,3 @@ private-tmp
 noexec ${HOME}
 noexec /tmp
-no3d
-nosound
diff --git a/etc/jd-gui.profile b/etc/jd-gui.profile
index e0184908b..6ff618187 100644
--- a/etc/jd-gui.profile
+++ b/etc/jd-gui.profile
@@ -18,9 +18,11 @@ include /etc/firejail/disable-devel.inc
 caps.drop all
 net none
 netfilter
+no3d
 nogroups
 nonewprivs
 noroot
+nosound
 protocol unix
 seccomp
 shell none
@@ -30,6 +32,3 @@ private-tmp
 noexec ${HOME}
 noexec /tmp
-no3d
-nosound
diff --git a/etc/libreoffice.profile b/etc/libreoffice.profile
index dda4e6ab9..fb82195b3 100644
--- a/etc/libreoffice.profile
+++ b/etc/libreoffice.profile
@@ -25,4 +25,3 @@ private-dev
 noexec ${HOME}
 noexec /tmp
diff --git a/etc/lollypop.profile b/etc/lollypop.profile
index 4b51f69b0..e84118b9e 100644
--- a/etc/lollypop.profile
+++ b/etc/lollypop.profile
@@ -18,6 +18,7 @@ include /etc/firejail/disable-devel.inc
 #Options
 caps.drop all
 netfilter
+no3d
 nogroups
 nonewprivs
 noroot
@@ -31,5 +32,3 @@ private-tmp
 noexec ${HOME}
 noexec /tmp
-no3d
diff --git a/etc/pdfsam.profile b/etc/pdfsam.profile
index 523c11f26..dfe463c98 100644
--- a/etc/pdfsam.profile
+++ b/etc/pdfsam.profile
@@ -16,9 +16,11 @@ include /etc/firejail/disable-devel.inc
 caps.drop all
 net none
 netfilter
+no3d
 nogroups
 nonewprivs
 noroot
+nosound
 protocol unix
 seccomp
 shell none
@@ -28,6 +30,3 @@ private-tmp
 noexec ${HOME}
 noexec /tmp
-no3d
-nosound
diff --git a/etc/pithos.profile b/etc/pithos.profile
index beb76909f..c25b5772b 100644
--- a/etc/pithos.profile
+++ b/etc/pithos.profile
@@ -17,6 +17,7 @@ include /etc/firejail/whitelist-common.inc
 #Options
 caps.drop all
 netfilter
+no3d
 nogroups
 nonewprivs
 noroot
@@ -29,5 +30,3 @@ private-tmp
 noexec ${HOME}
 noexec /tmp
-no3d
author	Tad <tad@spotco.us>	2017-04-15 16:13:13 -0400
committer	Tad <tad@spotco.us>	2017-04-15 16:13:13 -0400
commit	ba934b70f9ba0ba5ec10275f007fd784b16da91c (patch)
tree	b626f4d5b0f5bae49410dc72b185c32727b9c2e9 /etc
parent	Harden 19 more profiles (diff)
download	firejail-ba934b70f9ba0ba5ec10275f007fd784b16da91c.tar.gz firejail-ba934b70f9ba0ba5ec10275f007fd784b16da91c.tar.zst firejail-ba934b70f9ba0ba5ec10275f007fd784b16da91c.zip

diff --git a/etc/bless.profile b/etc/bless.profile index ac4c08fb0..869f13cc0 100644 --- a/etc/bless.profile +++ b/etc/bless.profile
@@ -19,9 +19,11 @@ include /etc/firejail/disable-devel.inc
19	caps.drop all	19	caps.drop all
20	net none	20	net none
21	netfilter	21	netfilter
		22	no3d
22	nogroups	23	nogroups
23	nonewprivs	24	nonewprivs
24	noroot	25	noroot
		26	nosound
25	protocol unix	27	protocol unix
26	seccomp	28	seccomp
27	shell none	29	shell none
@@ -32,6 +34,3 @@ private-tmp
32		34
33	noexec ${HOME}	35	noexec ${HOME}
34	noexec /tmp	36	noexec /tmp
35
36	no3d
37	nosound


diff --git a/etc/jd-gui.profile b/etc/jd-gui.profile index e0184908b..6ff618187 100644 --- a/etc/jd-gui.profile +++ b/etc/jd-gui.profile
@@ -18,9 +18,11 @@ include /etc/firejail/disable-devel.inc
18	caps.drop all	18	caps.drop all
19	net none	19	net none
20	netfilter	20	netfilter
		21	no3d
21	nogroups	22	nogroups
22	nonewprivs	23	nonewprivs
23	noroot	24	noroot
		25	nosound
24	protocol unix	26	protocol unix
25	seccomp	27	seccomp
26	shell none	28	shell none
@@ -30,6 +32,3 @@ private-tmp
30		32
31	noexec ${HOME}	33	noexec ${HOME}
32	noexec /tmp	34	noexec /tmp
33
34	no3d
35	nosound


diff --git a/etc/libreoffice.profile b/etc/libreoffice.profile index dda4e6ab9..fb82195b3 100644 --- a/etc/libreoffice.profile +++ b/etc/libreoffice.profile
@@ -25,4 +25,3 @@ private-dev
25		25
26	noexec ${HOME}	26	noexec ${HOME}
27	noexec /tmp	27	noexec /tmp
28


diff --git a/etc/lollypop.profile b/etc/lollypop.profile index 4b51f69b0..e84118b9e 100644 --- a/etc/lollypop.profile +++ b/etc/lollypop.profile
@@ -18,6 +18,7 @@ include /etc/firejail/disable-devel.inc
18	#Options	18	#Options
19	caps.drop all	19	caps.drop all
20	netfilter	20	netfilter
		21	no3d
21	nogroups	22	nogroups
22	nonewprivs	23	nonewprivs
23	noroot	24	noroot
@@ -31,5 +32,3 @@ private-tmp
31		32
32	noexec ${HOME}	33	noexec ${HOME}
33	noexec /tmp	34	noexec /tmp
34
35	no3d


diff --git a/etc/pdfsam.profile b/etc/pdfsam.profile index 523c11f26..dfe463c98 100644 --- a/etc/pdfsam.profile +++ b/etc/pdfsam.profile
@@ -16,9 +16,11 @@ include /etc/firejail/disable-devel.inc
16	caps.drop all	16	caps.drop all
17	net none	17	net none
18	netfilter	18	netfilter
		19	no3d
19	nogroups	20	nogroups
20	nonewprivs	21	nonewprivs
21	noroot	22	noroot
		23	nosound
22	protocol unix	24	protocol unix
23	seccomp	25	seccomp
24	shell none	26	shell none
@@ -28,6 +30,3 @@ private-tmp
28		30
29	noexec ${HOME}	31	noexec ${HOME}
30	noexec /tmp	32	noexec /tmp
31
32	no3d
33	nosound


diff --git a/etc/pithos.profile b/etc/pithos.profile index beb76909f..c25b5772b 100644 --- a/etc/pithos.profile +++ b/etc/pithos.profile
@@ -17,6 +17,7 @@ include /etc/firejail/whitelist-common.inc
17	#Options	17	#Options
18	caps.drop all	18	caps.drop all
19	netfilter	19	netfilter
		20	no3d
20	nogroups	21	nogroups
21	nonewprivs	22	nonewprivs
22	noroot	23	noroot
@@ -29,5 +30,3 @@ private-tmp
29		30
30	noexec ${HOME}	31	noexec ${HOME}
31	noexec /tmp	32	noexec /tmp
32
33	no3d