diff options
-rw-r--r-- | README | 2 | ||||
-rw-r--r-- | README.md | 2 | ||||
-rw-r--r-- | RELNOTES | 2 | ||||
-rw-r--r-- | etc/disable-programs.inc | 1 | ||||
-rw-r--r-- | etc/viewnior.profile | 30 | ||||
-rw-r--r-- | platform/debian/conffiles | 1 | ||||
-rw-r--r-- | src/firecfg/firecfg.config | 1 |
7 files changed, 36 insertions, 3 deletions
@@ -183,7 +183,7 @@ Fred-Barclay (https://github.com/Fred-Barclay) | |||
183 | - tighten keepassx | 183 | - tighten keepassx |
184 | - added Thunar profile | 184 | - added Thunar profile |
185 | - added mousepad, qpicview, and cvlc profiles | 185 | - added mousepad, qpicview, and cvlc profiles |
186 | - addedd BibleTime profile | 186 | - added BibleTime and profiles |
187 | G4JC (http://sourceforge.net/u/gaming4jc/profile/) | 187 | G4JC (http://sourceforge.net/u/gaming4jc/profile/) |
188 | - ARM support | 188 | - ARM support |
189 | - profile fixes | 189 | - profile fixes |
@@ -196,4 +196,4 @@ simple-scan, skanlite, ssh-agent, tracker, transmission-cli, transmission-show, | |||
196 | xed, pluma, Cryptocat, Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5, | 196 | xed, pluma, Cryptocat, Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5, |
197 | PDFSam, Pithos, Xonotic, wireshark, keepassx2, QupZilla, FossaMail, Uzbl browser, xmms, iridium browser, | 197 | PDFSam, Pithos, Xonotic, wireshark, keepassx2, QupZilla, FossaMail, Uzbl browser, xmms, iridium browser, |
198 | Kino, Thunar, Geeqie, Engrampa, Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView, baloo_file, | 198 | Kino, Thunar, Geeqie, Engrampa, Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView, baloo_file, |
199 | Nylas, dino, BibleTime | 199 | Nylas, dino, BibleTime, viewnior |
@@ -36,7 +36,7 @@ firejail (0.9.46-rc1) baseline; urgency=low | |||
36 | * new profiles: Xonotic, wireshark, keepassx2, QupZilla, FossaMail, | 36 | * new profiles: Xonotic, wireshark, keepassx2, QupZilla, FossaMail, |
37 | * new profiles: Uzbl browser, iridium browser, Thunar, Geeqie, Engrampa, | 37 | * new profiles: Uzbl browser, iridium browser, Thunar, Geeqie, Engrampa, |
38 | * new profiles: Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView, | 38 | * new profiles: Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView, |
39 | * new profiles: baloo_file, Nylas, dino, BibleTime | 39 | * new profiles: baloo_file, Nylas, dino, BibleTime, viewnior |
40 | * bugfixes | 40 | * bugfixes |
41 | -- netblue30 <netblue30@yahoo.com> Fri, 7 Apr 2017 08:00:00 -0500 | 41 | -- netblue30 <netblue30@yahoo.com> Fri, 7 Apr 2017 08:00:00 -0500 |
42 | 42 | ||
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index bad1f0263..e9ed47e38 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -124,6 +124,7 @@ blacklist ${HOME}/.config/totem | |||
124 | blacklist ${HOME}/.config/tox | 124 | blacklist ${HOME}/.config/tox |
125 | blacklist ${HOME}/.config/transmission | 125 | blacklist ${HOME}/.config/transmission |
126 | blacklist ${HOME}/.config/uGet | 126 | blacklist ${HOME}/.config/uGet |
127 | blacklist ${HOME}/.config/viewnior | ||
127 | blacklist ${HOME}/.config/vivaldi | 128 | blacklist ${HOME}/.config/vivaldi |
128 | blacklist ${HOME}/.config/vlc | 129 | blacklist ${HOME}/.config/vlc |
129 | blacklist ${HOME}/.config/wesnoth | 130 | blacklist ${HOME}/.config/wesnoth |
diff --git a/etc/viewnior.profile b/etc/viewnior.profile new file mode 100644 index 000000000..190c04e39 --- /dev/null +++ b/etc/viewnior.profile | |||
@@ -0,0 +1,30 @@ | |||
1 | # This file is overwritten during software install. | ||
2 | # Persistent customizations should go in a .local file. | ||
3 | include /etc/firejail/viewnior.local | ||
4 | |||
5 | # Firejail profile for viewnior | ||
6 | noblacklist ~/.config/viewnior | ||
7 | |||
8 | include /etc/firejail/disable-common.inc | ||
9 | include /etc/firejail/disable-programs.inc | ||
10 | include /etc/firejail/disable-devel.inc | ||
11 | include /etc/firejail/disable-passwdmgr.inc | ||
12 | |||
13 | blacklist ~/.bashrc | ||
14 | blacklist ~/.Xauthority | ||
15 | |||
16 | caps.drop all | ||
17 | net none | ||
18 | nogroups | ||
19 | nonewprivs | ||
20 | noroot | ||
21 | nosound | ||
22 | protocol unix | ||
23 | seccomp | ||
24 | shell none | ||
25 | tracelog | ||
26 | |||
27 | private-bin viewnior | ||
28 | private-dev | ||
29 | private-etc fonts | ||
30 | private-tmp | ||
diff --git a/platform/debian/conffiles b/platform/debian/conffiles index 5f994128a..dca17bfbe 100644 --- a/platform/debian/conffiles +++ b/platform/debian/conffiles | |||
@@ -205,6 +205,7 @@ | |||
205 | /etc/firejail/unrar.profile | 205 | /etc/firejail/unrar.profile |
206 | /etc/firejail/unzip.profile | 206 | /etc/firejail/unzip.profile |
207 | /etc/firejail/uudeview.profile | 207 | /etc/firejail/uudeview.profile |
208 | /etc/firejail/viewnior.profile | ||
208 | /etc/firejail/vim.profile | 209 | /etc/firejail/vim.profile |
209 | /etc/firejail/virtualbox.profile | 210 | /etc/firejail/virtualbox.profile |
210 | /etc/firejail/vivaldi.profile | 211 | /etc/firejail/vivaldi.profile |
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 4a40402d7..27a34472d 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config | |||
@@ -140,6 +140,7 @@ simple-scan | |||
140 | skanlite | 140 | skanlite |
141 | spotify | 141 | spotify |
142 | totem | 142 | totem |
143 | viewnior | ||
143 | vlc | 144 | vlc |
144 | xfburn | 145 | xfburn |
145 | xmms | 146 | xmms |