aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@protonmail.com>2021-05-20 08:21:45 -0400
committerLibravatar netblue30 <netblue30@protonmail.com>2021-05-20 08:21:45 -0400
commiteb30ce54e7a8a75db773a1bbe762a3abdf2ccc42 (patch)
treead897bbb49cef1e4cfade7e97669c9149e78ceaa /etc
parentjailtest -> jailcheck (#4268) (diff)
downloadfirejail-eb30ce54e7a8a75db773a1bbe762a3abdf2ccc42.tar.gz
firejail-eb30ce54e7a8a75db773a1bbe762a3abdf2ccc42.tar.zst
firejail-eb30ce54e7a8a75db773a1bbe762a3abdf2ccc42.zip
new profiles
Diffstat (limited to 'etc')
-rw-r--r--etc/inc/disable-programs.inc4
-rw-r--r--etc/profile-a-l/blobby.profile52
-rw-r--r--etc/profile-a-l/etr.profile2
-rw-r--r--etc/profile-a-l/funnyboat.profile57
-rw-r--r--etc/profile-a-l/librecad.profile50
5 files changed, 165 insertions, 0 deletions
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc
index 90abe1d3e..fddd782c2 100644
--- a/etc/inc/disable-programs.inc
+++ b/etc/inc/disable-programs.inc
@@ -57,6 +57,7 @@ blacklist ${HOME}/.balsa
57blacklist ${HOME}/.bcast5 57blacklist ${HOME}/.bcast5
58blacklist ${HOME}/.bibletime 58blacklist ${HOME}/.bibletime
59blacklist ${HOME}/.bitcoin 59blacklist ${HOME}/.bitcoin
60blacklist ${HOME}/.blobby
60blacklist ${HOME}/.bogofilter 61blacklist ${HOME}/.bogofilter
61blacklist ${HOME}/.bzf 62blacklist ${HOME}/.bzf
62blacklist ${HOME}/.cargo/advisory-db 63blacklist ${HOME}/.cargo/advisory-db
@@ -109,6 +110,7 @@ blacklist ${HOME}/.config/Jitsi Meet
109blacklist ${HOME}/.config/KDE/neochat 110blacklist ${HOME}/.config/KDE/neochat
110blacklist ${HOME}/.config/Kid3 111blacklist ${HOME}/.config/Kid3
111blacklist ${HOME}/.config/Kingsoft 112blacklist ${HOME}/.config/Kingsoft
113blacklist ${HOME}/.config/LibreCAD
112blacklist ${HOME}/.config/Loop_Hero 114blacklist ${HOME}/.config/Loop_Hero
113blacklist ${HOME}/.config/Luminance 115blacklist ${HOME}/.config/Luminance
114blacklist ${HOME}/.config/LyX 116blacklist ${HOME}/.config/LyX
@@ -494,6 +496,7 @@ blacklist ${HOME}/.freecol
494blacklist ${HOME}/.freemind 496blacklist ${HOME}/.freemind
495blacklist ${HOME}/.frogatto 497blacklist ${HOME}/.frogatto
496blacklist ${HOME}/.frozen-bubble 498blacklist ${HOME}/.frozen-bubble
499blacklist ${HOME}/.funnyboat
497blacklist ${HOME}/.gimp* 500blacklist ${HOME}/.gimp*
498blacklist ${HOME}/.gist 501blacklist ${HOME}/.gist
499blacklist ${HOME}/.gitconfig 502blacklist ${HOME}/.gitconfig
@@ -606,6 +609,7 @@ blacklist ${HOME}/.local/share/Flavio Tordini
606blacklist ${HOME}/.local/share/JetBrains 609blacklist ${HOME}/.local/share/JetBrains
607blacklist ${HOME}/.local/share/KDE/neochat 610blacklist ${HOME}/.local/share/KDE/neochat
608blacklist ${HOME}/.local/share/Kingsoft 611blacklist ${HOME}/.local/share/Kingsoft
612blacklist ${HOME}/.local/share/LibreCAD
609blacklist ${HOME}/.local/share/Mendeley Ltd. 613blacklist ${HOME}/.local/share/Mendeley Ltd.
610blacklist ${HOME}/.local/share/Mumble 614blacklist ${HOME}/.local/share/Mumble
611blacklist ${HOME}/.local/share/Nextcloud 615blacklist ${HOME}/.local/share/Nextcloud
diff --git a/etc/profile-a-l/blobby.profile b/etc/profile-a-l/blobby.profile
new file mode 100644
index 000000000..9bb097b7e
--- /dev/null
+++ b/etc/profile-a-l/blobby.profile
@@ -0,0 +1,52 @@
1# Firejail profile for blobby
2# Persistent local customizations
3include blobby.local
4# Persistent global definitions
5include globals.local
6
7noblacklist ${HOME}/.blobby
8
9include disable-common.inc
10include disable-devel.inc
11include disable-exec.inc
12include disable-interpreters.inc
13include disable-passwdmgr.inc
14include disable-programs.inc
15include disable-shell.inc
16include disable-xdg.inc
17
18mkdir ${HOME}/.blobby
19whitelist ${HOME}/.blobby
20include whitelist-common.inc
21whitelist /usr/share/blobby
22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc
24
25apparmor
26caps.drop all
27ipc-namespace
28netfilter
29nodvd
30nogroups
31noinput
32nonewprivs
33noroot
34notv
35nou2f
36novideo
37protocol unix,inet,netlink,
38netfilter
39seccomp
40shell none
41tracelog
42
43disable-mnt
44private-bin blobby,
45private-lib
46private-dev
47private-etc hosts,group,asound.conf,alsa,machine-id,pulse,drirc,login.defs,passwd,
48private-tmp
49
50dbus-user none
51dbus-system none
52memory-deny-write-execute
diff --git a/etc/profile-a-l/etr.profile b/etc/profile-a-l/etr.profile
index b970b0dfd..d44d419c1 100644
--- a/etc/profile-a-l/etr.profile
+++ b/etc/profile-a-l/etr.profile
@@ -20,6 +20,8 @@ include disable-xdg.inc
20mkdir ${HOME}/.etr 20mkdir ${HOME}/.etr
21whitelist ${HOME}/.etr 21whitelist ${HOME}/.etr
22whitelist /usr/share/etr 22whitelist /usr/share/etr
23# Debian version
24whitelist /usr/share/games/etr
23include whitelist-common.inc 25include whitelist-common.inc
24include whitelist-runuser-common.inc 26include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 27include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/funnyboat.profile b/etc/profile-a-l/funnyboat.profile
new file mode 100644
index 000000000..e4d9b018e
--- /dev/null
+++ b/etc/profile-a-l/funnyboat.profile
@@ -0,0 +1,57 @@
1# Firejail profile for default
2# This file is overwritten after every install/update
3# Persistent local customizations
4include funnyboat.local
5# Persistent global definitions
6include globals.local
7
8noblacklist ${HOME}/.funnyboat
9
10include disable-common.inc
11include disable-devel.inc
12ignore noexec /dev/shm
13include disable-exec.inc
14include allow-python2.inc
15include allow-python3.inc
16include disable-interpreters.inc
17include disable-passwdmgr.inc
18include disable-programs.inc
19# include disable-shell.inc
20include disable-write-mnt.inc
21include disable-xdg.inc
22
23mkdir ${HOME}/.funnyboat
24whitelist ${HOME}/.funnyboat
25include whitelist-common.inc
26include whitelist-runuser-common.inc
27whitelist /usr/share/funnyboat
28# Debian:
29whitelist /usr/share/games/funnyboat
30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc
32
33apparmor
34caps.drop all
35ipc-namespace
36netfilter
37nodvd
38nogroups
39noinput
40nonewprivs
41noroot
42notv
43novideo
44protocol unix,inet,inet6
45seccomp
46shell none
47# tracelog
48
49disable-mnt
50private-cache
51private-dev
52private-tmp
53
54dbus-user none
55dbus-system none
56
57memory-deny-write-execute
diff --git a/etc/profile-a-l/librecad.profile b/etc/profile-a-l/librecad.profile
new file mode 100644
index 000000000..431caf914
--- /dev/null
+++ b/etc/profile-a-l/librecad.profile
@@ -0,0 +1,50 @@
1# Firejail profile for librecad
2# Persistent local customizations
3include librecad.local
4# Persistent global definitions
5include globals.local
6
7noblacklist ${HOME}/.config/LibreCAD
8noblacklist ${HOME}/.local/share/LibreCAD
9
10include disable-common.inc
11include disable-devel.inc
12include disable-exec.inc
13include disable-interpreters.inc
14include disable-passwdmgr.inc
15include disable-programs.inc
16include disable-shell.inc
17include disable-xdg.inc
18
19whitelist /usr/share/librecad
20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc
22
23apparmor
24caps.drop all
25ipc-namespace
26netfilter
27nodvd
28#nogroups
29#noinput
30nonewprivs
31noroot
32notv
33#nou2f
34novideo
35protocol unix,inet,inet6,
36netfilter
37seccomp
38shell none
39#tracelog
40
41#disable-mnt
42private-bin librecad,
43#private-lib
44private-dev
45# private-etc cups,drirc,fonts,xdg,passwd,
46private-tmp
47
48dbus-user none
49dbus-system none
50memory-deny-write-execute
generated by cgit v1.2.3-54-g00ecf (git 2.45.1) at 2024-06-04 09:09:40 +0000