aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar kortewegdevries <62639087+kortewegdevries@users.noreply.github.com>2020-12-16 18:12:48 +0000
committerLibravatar GitHub <noreply@github.com>2020-12-16 18:12:48 +0000
commitf3056a862a6eb9ccbd08760c1b8d7fa769f90e9f (patch)
tree071ecab873aa6e02620f5a71d11d8a5e946d66bf /etc
parentarchiver fixes (#3830) (diff)
downloadfirejail-f3056a862a6eb9ccbd08760c1b8d7fa769f90e9f.tar.gz
firejail-f3056a862a6eb9ccbd08760c1b8d7fa769f90e9f.tar.zst
firejail-f3056a862a6eb9ccbd08760c1b8d7fa769f90e9f.zip
New profiles for alacarte,tootle,photoflare (#3816)
* New profiles for alacarte,tootle,photoflare * Fix dbus Co-authored-by: kortewegdevries <kortewegdevries@protonmail.ch>
Diffstat (limited to 'etc')
-rw-r--r--etc/inc/disable-programs.inc1
-rw-r--r--etc/profile-a-l/alacarte.profile64
-rw-r--r--etc/profile-a-l/com.github.bleakgrey.tootle.profile55
-rw-r--r--etc/profile-m-z/photoflare.profile50
4 files changed, 170 insertions, 0 deletions
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc
index 9b098f43c..59bd28f95 100644
--- a/etc/inc/disable-programs.inc
+++ b/etc/inc/disable-programs.inc
@@ -188,6 +188,7 @@ blacklist ${HOME}/.config/chromium-flags.conf
188blacklist ${HOME}/.config/clipit 188blacklist ${HOME}/.config/clipit
189blacklist ${HOME}/.config/cliqz 189blacklist ${HOME}/.config/cliqz
190blacklist ${HOME}/.config/cmus 190blacklist ${HOME}/.config/cmus
191blacklist ${HOME}/.config/com.github.bleakgrey.tootle
191blacklist ${HOME}/.config/corebird 192blacklist ${HOME}/.config/corebird
192blacklist ${HOME}/.config/cower 193blacklist ${HOME}/.config/cower
193blacklist ${HOME}/.config/darktable 194blacklist ${HOME}/.config/darktable
diff --git a/etc/profile-a-l/alacarte.profile b/etc/profile-a-l/alacarte.profile
new file mode 100644
index 000000000..5fabf8283
--- /dev/null
+++ b/etc/profile-a-l/alacarte.profile
@@ -0,0 +1,64 @@
1# Firejail profile for alacarte
2# Description: Create desktop and menu launchers easily
3# This file is overwritten after every install/update
4# Persistent local customizations
5include alacarte.local
6# Persistent global definitions
7include globals.local
8
9include allow-python2.inc
10include allow-python3.inc
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-programs.inc
17include disable-passwdmgr.inc
18include disable-xdg.inc
19
20# Whitelist your system icon directory,varies by distro
21whitelist /usr/share/alacarte
22whitelist /usr/share/app-info
23whitelist /usr/share/desktop-directories
24whitelist /usr/share/icons
25whitelist /var/lib/app-info/icons
26whitelist /var/lib/flatpak/exports/share/applications
27whitelist /var/lib/flatpak/exports/share/icons
28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc
30include whitelist-var-common.inc
31
32apparmor
33caps.drop all
34machine-id
35net none
36nodvd
37no3d
38nogroups
39nonewprivs
40noroot
41nosound
42notv
43nou2f
44novideo
45protocol unix
46seccomp
47seccomp.block-secondary
48shell none
49tracelog
50
51disable-mnt
52private-bin alacarte,bash,python*,sh
53private-cache
54private-dev
55private-etc alternatives,dconf,fonts,gtk-3.0,locale.alias,locale.conf,login.defs,mime.types,nsswitch.conf,passwd,pki,X11,xdg
56private-tmp
57
58dbus-user none
59dbus-system none
60
61read-write ${HOME}/.config/menus
62read-write ${HOME}/.gnome/apps
63read-write ${HOME}/.local/share/applications
64read-write ${HOME}/.local/share/flatpak/exports
diff --git a/etc/profile-a-l/com.github.bleakgrey.tootle.profile b/etc/profile-a-l/com.github.bleakgrey.tootle.profile
new file mode 100644
index 000000000..4de7eb497
--- /dev/null
+++ b/etc/profile-a-l/com.github.bleakgrey.tootle.profile
@@ -0,0 +1,55 @@
1# Firejail profile for com.github.bleakgrey.tootle
2# Description: Gtk Mastodon client
3# This file is overwritten after every install/update
4# Persistent local customizations
5include com.github.bleakgrey.tootle.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/com.github.bleakgrey.tootle
10
11include disable-common.inc
12include disable-devel.inc
13include disable-exec.inc
14include disable-interpreters.inc
15include disable-passwdmgr.inc
16include disable-programs.inc
17include disable-shell.inc
18include disable-xdg.inc
19
20mkdir ${HOME}/.config/com.github.bleakgrey.tootle
21whitelist ${DOWNLOADS}
22whitelist ${HOME}/.config/com.github.bleakgrey.tootle
23include whitelist-common.inc
24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc
27
28apparmor
29caps.drop all
30machine-id
31netfilter
32nodvd
33nogroups
34nonewprivs
35noroot
36notv
37nou2f
38novideo
39protocol unix,inet,inet6
40seccomp
41shell none
42tracelog
43
44disable-mnt
45private-bin com.github.bleakgrey.tootle
46private-cache
47private-dev
48private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,dconf,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,machine-id mime.types,nsswitch.conf,pki,pulse,resolv.conf,ssl,X11,xdg
49private-tmp
50
51# Settings are immutable
52# dbus-user filter
53# dbus-user.own com.github.bleakgrey.tootle
54# dbus-user.talk ca.desrt.dconf
55dbus-system none
diff --git a/etc/profile-m-z/photoflare.profile b/etc/profile-m-z/photoflare.profile
new file mode 100644
index 000000000..d9df3e3b3
--- /dev/null
+++ b/etc/profile-m-z/photoflare.profile
@@ -0,0 +1,50 @@
1# Firejail profile for photoflare
2# Description: Simple painting and editing program
3# This file is overwritten after every install/update
4# Persistent local customizations
5include photoflare.local
6# Persistent global definitions
7include photoflare.local
8
9noblacklist ${PICTURES}
10
11include disable-common.inc
12include disable-devel.inc
13include disable-exec.inc
14include disable-interpreters.inc
15include disable-passwdmgr.inc
16include disable-programs.inc
17include disable-shell.inc
18include disable-xdg.inc
19
20include whitelist-runuser-common.inc
21include whitelist-usr-share-common.inc
22include whitelist-var-common.inc
23
24apparmor
25caps.drop all
26machine-id
27net none
28nodvd
29no3d
30nogroups
31nonewprivs
32noroot
33nosound
34notv
35nou2f
36novideo
37protocol unix
38seccomp
39shell none
40tracelog
41
42disable-mnt
43private-bin photoflare
44private-cache
45private-dev
46private-etc alternatives,fonts,locale,locale.alias,locale.conf,mime.types,X11
47private-tmp
48
49dbus-user none
50dbus-system none
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-06-28 17:41:45 +0000