diff options
-rw-r--r-- | Makefile.in | 1 | ||||
-rw-r--r-- | README | 2 | ||||
-rw-r--r-- | README.md | 2 | ||||
-rw-r--r-- | RELNOTES | 2 | ||||
-rw-r--r-- | etc/atom.profile | 17 | ||||
-rw-r--r-- | platform/debian/conffiles | 5 | ||||
-rw-r--r-- | src/firecfg/firecfg.config | 1 |
7 files changed, 25 insertions, 5 deletions
diff --git a/Makefile.in b/Makefile.in index 85e81fada..a5a3d7da9 100644 --- a/Makefile.in +++ b/Makefile.in | |||
@@ -221,6 +221,7 @@ realinstall: | |||
221 | install -c -m 0644 .etc/less.profile $(DESTDIR)/$(sysconfdir)/firejail/. | 221 | install -c -m 0644 .etc/less.profile $(DESTDIR)/$(sysconfdir)/firejail/. |
222 | install -c -m 0644 .etc/Telegram.profile $(DESTDIR)/$(sysconfdir)/firejail/. | 222 | install -c -m 0644 .etc/Telegram.profile $(DESTDIR)/$(sysconfdir)/firejail/. |
223 | install -c -m 0644 .etc/atom-beta.profile $(DESTDIR)/$(sysconfdir)/firejail/. | 223 | install -c -m 0644 .etc/atom-beta.profile $(DESTDIR)/$(sysconfdir)/firejail/. |
224 | install -c -m 0644 .etc/atom.profile $(DESTDIR)/$(sysconfdir)/firejail/. | ||
224 | sh -c "if [ ! -f $(DESTDIR)/$(sysconfdir)/firejail/login.users ]; then install -c -m 0644 etc/login.users $(DESTDIR)/$(sysconfdir)/firejail/.; fi;" | 225 | sh -c "if [ ! -f $(DESTDIR)/$(sysconfdir)/firejail/login.users ]; then install -c -m 0644 etc/login.users $(DESTDIR)/$(sysconfdir)/firejail/.; fi;" |
225 | install -c -m 0644 etc/firejail.config $(DESTDIR)/$(sysconfdir)/firejail/. | 226 | install -c -m 0644 etc/firejail.config $(DESTDIR)/$(sysconfdir)/firejail/. |
226 | rm -fr .etc | 227 | rm -fr .etc |
@@ -54,7 +54,7 @@ Fred-Barclay (https://github.com/Fred-Barclay) | |||
54 | - added pix profile | 54 | - added pix profile |
55 | - added audacity profile | 55 | - added audacity profile |
56 | - fixed Telegram and qtox profiles | 56 | - fixed Telegram and qtox profiles |
57 | - added Atom Beta profile | 57 | - added Atom Beta and Atom profiles |
58 | Jaykishan Mutkawoa (https://github.com/jmutkawoa) | 58 | Jaykishan Mutkawoa (https://github.com/jmutkawoa) |
59 | - cpio profile | 59 | - cpio profile |
60 | Paupiah Yash (https://github.com/CaffeinatedStud) | 60 | Paupiah Yash (https://github.com/CaffeinatedStud) |
@@ -102,5 +102,5 @@ Office: evince, gthumb, fbreader, pix | |||
102 | 102 | ||
103 | ## New security profiles | 103 | ## New security profiles |
104 | 104 | ||
105 | Gitter, gThumb, mpv, Franz messenger, LibreOffice, pix, audacity, strings, xz, xzdec, gzip, cpio, less, Atom Beta | 105 | Gitter, gThumb, mpv, Franz messenger, LibreOffice, pix, audacity, strings, xz, xzdec, gzip, cpio, less, Atom Beta, Atom |
106 | 106 | ||
@@ -8,7 +8,7 @@ firejail (0.9.41) baseline; urgency=low | |||
8 | * some profiles have been converted to private-bin | 8 | * some profiles have been converted to private-bin |
9 | * new profiles: Gitter, gThumb, mpv, Franz messenger, LibreOffice | 9 | * new profiles: Gitter, gThumb, mpv, Franz messenger, LibreOffice |
10 | * new profiles: pix, audacity, strings, xz, xzdec, gzip, cpio, less | 10 | * new profiles: pix, audacity, strings, xz, xzdec, gzip, cpio, less |
11 | * new profiles: Atom Beta | 11 | * new profiles: Atom Beta, Atom |
12 | -- netblue30 <netblue30@yahoo.com> Tue, 31 May 2016 08:00:00 -0500 | 12 | -- netblue30 <netblue30@yahoo.com> Tue, 31 May 2016 08:00:00 -0500 |
13 | 13 | ||
14 | firejail (0.9.40) baseline; urgency=low | 14 | firejail (0.9.40) baseline; urgency=low |
diff --git a/etc/atom.profile b/etc/atom.profile new file mode 100644 index 000000000..f996ea79e --- /dev/null +++ b/etc/atom.profile | |||
@@ -0,0 +1,17 @@ | |||
1 | # Firjail profile for Atom. | ||
2 | noblacklist ~/.atom | ||
3 | noblacklist ~/.config/Atom | ||
4 | |||
5 | include /etc/firejail/disable-common.inc | ||
6 | include /etc/firejail/disable-programs.inc | ||
7 | include /etc/firejail/disable-passwdmgr.inc | ||
8 | |||
9 | caps.drop all | ||
10 | netfilter | ||
11 | nonewprivs | ||
12 | nogroups | ||
13 | noroot | ||
14 | seccomp | ||
15 | shell none | ||
16 | |||
17 | private-dev | ||
diff --git a/platform/debian/conffiles b/platform/debian/conffiles index 20a68146c..3ae366541 100644 --- a/platform/debian/conffiles +++ b/platform/debian/conffiles | |||
@@ -1,3 +1,5 @@ | |||
1 | # Do not have a new/empty line on the end of this file or dpkg-deb will warn | ||
2 | # that "conffile '' is not a plain file." | ||
1 | /etc/firejail/evince.profile | 3 | /etc/firejail/evince.profile |
2 | /etc/firejail/chromium.profile | 4 | /etc/firejail/chromium.profile |
3 | /etc/firejail/chromium-browser.profile | 5 | /etc/firejail/chromium-browser.profile |
@@ -127,5 +129,4 @@ | |||
127 | /etc/firejail/less.profile | 129 | /etc/firejail/less.profile |
128 | /etc/firejail/Telegram.profile | 130 | /etc/firejail/Telegram.profile |
129 | /etc/firejail/atom-beta.profile | 131 | /etc/firejail/atom-beta.profile |
130 | 132 | /etc/firejail/atom.profile | |
131 | |||
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 55b61df7d..55e7e30de 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config | |||
@@ -127,6 +127,7 @@ xreader | |||
127 | snap | 127 | snap |
128 | ssh | 128 | ssh |
129 | atom-beta | 129 | atom-beta |
130 | atom | ||
130 | 131 | ||
131 | # weather/climate | 132 | # weather/climate |
132 | aweather | 133 | aweather |