diff options
-rw-r--r-- | README.md | 2 | ||||
-rw-r--r-- | RELNOTES | 3 | ||||
-rw-r--r-- | etc/disable-programs.inc | 2 | ||||
-rw-r--r-- | etc/mate-calc.profile | 26 | ||||
-rw-r--r-- | etc/mate-calculator.profile | 2 | ||||
-rw-r--r-- | etc/mate-color-select.profile | 26 | ||||
-rw-r--r-- | etc/mate-dictionary.profile | 26 | ||||
-rw-r--r-- | platform/debian/conffiles | 5 | ||||
-rw-r--r-- | src/firecfg/firecfg.config | 5 |
9 files changed, 95 insertions, 2 deletions
@@ -217,4 +217,4 @@ xed, pluma, Cryptocat, Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-G | |||
217 | PDFSam, Pithos, Xonotic, wireshark, keepassx2, QupZilla, FossaMail, Uzbl browser, xmms, iridium browser, | 217 | PDFSam, Pithos, Xonotic, wireshark, keepassx2, QupZilla, FossaMail, Uzbl browser, xmms, iridium browser, |
218 | Kino, Thunar, Geeqie, Engrampa, Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView, baloo_file, | 218 | Kino, Thunar, Geeqie, Engrampa, Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView, baloo_file, |
219 | Nylas, dino, BibleTime, viewnior, Kodi, viking, youtube-dl, meld, Arduino, Akregator, KCalc, KTorrent, | 219 | Nylas, dino, BibleTime, viewnior, Kodi, viking, youtube-dl, meld, Arduino, Akregator, KCalc, KTorrent, |
220 | Orage Globaltime, Orage Clendar, xfce4-notes, xfce4-dict, Ristretto, PCManFM, Dia, FontForge, Geany, Hugin | 220 | Orage Globaltime, Orage Clendar, xfce4-notes, xfce4-dict, Ristretto, PCManFM, Dia, FontForge, Geany, Hugin, mate-calc, mate-dictionary, mate-color-select |
@@ -40,7 +40,8 @@ firejail (0.9.46-rc1) baseline; urgency=low | |||
40 | * new profiles: baloo_file, Nylas, dino, BibleTime, viewnior, Kodi, viking, | 40 | * new profiles: baloo_file, Nylas, dino, BibleTime, viewnior, Kodi, viking, |
41 | * new profiles: youtube-dl, meld, Arduino, Akregator, KCalc, KTorrent, | 41 | * new profiles: youtube-dl, meld, Arduino, Akregator, KCalc, KTorrent, |
42 | * new profiles: Orage Globaltime, Orage Clendar, xfce4-notes, xfce4-dict, | 42 | * new profiles: Orage Globaltime, Orage Clendar, xfce4-notes, xfce4-dict, |
43 | * new profiles: Ristretto, PCManFM, Dia, FontForge, Geany, Hugin | 43 | * new profiles: Ristretto, PCManFM, Dia, FontForge, Geany, Hugin, |
44 | * new profiles: mate-calc, mate-dictionary, mate-color-select | ||
44 | * bugfixes | 45 | * bugfixes |
45 | -- netblue30 <netblue30@yahoo.com> Fri, 7 Apr 2017 08:00:00 -0500 | 46 | -- netblue30 <netblue30@yahoo.com> Fri, 7 Apr 2017 08:00:00 -0500 |
46 | 47 | ||
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 285a7f7e3..0f6ed5fa1 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -96,6 +96,8 @@ blacklist ${HOME}/.config/katevirc | |||
96 | blacklist ${HOME}/.config/kdeconnect | 96 | blacklist ${HOME}/.config/kdeconnect |
97 | blacklist ${HOME}/.config/libreoffice | 97 | blacklist ${HOME}/.config/libreoffice |
98 | blacklist ${HOME}/.config/mate/eom | 98 | blacklist ${HOME}/.config/mate/eom |
99 | blacklist ${HOME}/.config/mate/mate-dictionary | ||
100 | blacklist ${HOME}/.config/mate-calc | ||
99 | blacklist ${HOME}/.config/midori | 101 | blacklist ${HOME}/.config/midori |
100 | blacklist ${HOME}/.config/mpv | 102 | blacklist ${HOME}/.config/mpv |
101 | blacklist ${HOME}/.config/mupen64plus | 103 | blacklist ${HOME}/.config/mupen64plus |
diff --git a/etc/mate-calc.profile b/etc/mate-calc.profile new file mode 100644 index 000000000..81e8ddc03 --- /dev/null +++ b/etc/mate-calc.profile | |||
@@ -0,0 +1,26 @@ | |||
1 | # This file is overwritten during software install. | ||
2 | # Persistent customizations should go in a .local file. | ||
3 | include /etc/firejail/mate-calc.local | ||
4 | |||
5 | noblacklist ${HOME}/.config/mate-calc | ||
6 | include /etc/firejail/disable-common.inc | ||
7 | include /etc/firejail/disable-programs.inc | ||
8 | include /etc/firejail/disable-passwdmgr.inc | ||
9 | |||
10 | caps.drop all | ||
11 | netfilter | ||
12 | nonewprivs | ||
13 | noroot | ||
14 | protocol unix,inet,inet6 | ||
15 | seccomp | ||
16 | |||
17 | # | ||
18 | # depending on your usage, you can enable some of the commands below: | ||
19 | # | ||
20 | nogroups | ||
21 | shell none | ||
22 | # private-bin program | ||
23 | # private-etc none | ||
24 | # private-dev | ||
25 | # private-tmp | ||
26 | nosound | ||
diff --git a/etc/mate-calculator.profile b/etc/mate-calculator.profile new file mode 100644 index 000000000..0267a4b84 --- /dev/null +++ b/etc/mate-calculator.profile | |||
@@ -0,0 +1,2 @@ | |||
1 | #include /etc/firejail/mate-calc.profile | ||
2 | |||
diff --git a/etc/mate-color-select.profile b/etc/mate-color-select.profile new file mode 100644 index 000000000..e513d9b3b --- /dev/null +++ b/etc/mate-color-select.profile | |||
@@ -0,0 +1,26 @@ | |||
1 | # This file is overwritten during software install. | ||
2 | # Persistent customizations should go in a .local file. | ||
3 | include /etc/firejail/default.local | ||
4 | |||
5 | private | ||
6 | #include /etc/firejail/disable-common.inc | ||
7 | #include /etc/firejail/disable-programs.inc | ||
8 | #include /etc/firejail/disable-passwdmgr.inc | ||
9 | |||
10 | caps.drop all | ||
11 | netfilter | ||
12 | nonewprivs | ||
13 | noroot | ||
14 | protocol unix,inet,inet6 | ||
15 | seccomp | ||
16 | |||
17 | # | ||
18 | # depending on your usage, you can enable some of the commands below: | ||
19 | # | ||
20 | nogroups | ||
21 | shell none | ||
22 | # private-bin program | ||
23 | # private-etc none | ||
24 | # private-dev | ||
25 | # private-tmp | ||
26 | nosound | ||
diff --git a/etc/mate-dictionary.profile b/etc/mate-dictionary.profile new file mode 100644 index 000000000..0a472fca7 --- /dev/null +++ b/etc/mate-dictionary.profile | |||
@@ -0,0 +1,26 @@ | |||
1 | # This file is overwritten during software install. | ||
2 | # Persistent customizations should go in a .local file. | ||
3 | include /etc/firejail/mate-dictionary.local | ||
4 | |||
5 | noblacklist ${HOME}/.config/mate/mate-dictionary | ||
6 | include /etc/firejail/disable-common.inc | ||
7 | include /etc/firejail/disable-programs.inc | ||
8 | include /etc/firejail/disable-passwdmgr.inc | ||
9 | |||
10 | caps.drop all | ||
11 | netfilter | ||
12 | nonewprivs | ||
13 | noroot | ||
14 | protocol unix,inet,inet6 | ||
15 | seccomp | ||
16 | |||
17 | # | ||
18 | # depending on your usage, you can enable some of the commands below: | ||
19 | # | ||
20 | nogroups | ||
21 | shell none | ||
22 | # private-bin program | ||
23 | # private-etc none | ||
24 | # private-dev | ||
25 | # private-tmp | ||
26 | nosound | ||
diff --git a/platform/debian/conffiles b/platform/debian/conffiles index fa910f957..47f2a932c 100644 --- a/platform/debian/conffiles +++ b/platform/debian/conffiles | |||
@@ -281,3 +281,8 @@ | |||
281 | /etc/firejail/fontforge.profile | 281 | /etc/firejail/fontforge.profile |
282 | /etc/firejail/geany.profile | 282 | /etc/firejail/geany.profile |
283 | /etc/firejail/hugin.profile | 283 | /etc/firejail/hugin.profile |
284 | /etc/firejail/mate-calc.profile | ||
285 | /etc/firejail/mate-calculator.profile | ||
286 | /etc/firejail/mate-color-select.profile | ||
287 | /etc/firejail/mate-dictionary.profile | ||
288 | |||
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index db3b525ff..58beaec35 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config | |||
@@ -21,6 +21,7 @@ bleachbit | |||
21 | bless | 21 | bless |
22 | brasero | 22 | brasero |
23 | brave | 23 | brave |
24 | caja | ||
24 | cherrytree | 25 | cherrytree |
25 | chromium | 26 | chromium |
26 | chromium-browser | 27 | chromium-browser |
@@ -128,6 +129,10 @@ loweb | |||
128 | lowriter | 129 | lowriter |
129 | luminance-hdr | 130 | luminance-hdr |
130 | lynx | 131 | lynx |
132 | mate-calc | ||
133 | mate-calculator | ||
134 | mate-color-select | ||
135 | mate-dictionary | ||
131 | mathematica | 136 | mathematica |
132 | Mathematica | 137 | Mathematica |
133 | mediainfo | 138 | mediainfo |