diff options
-rw-r--r-- | Makefile.in | 2 | ||||
-rw-r--r-- | README | 2 | ||||
-rw-r--r-- | RELNOTES | 2 | ||||
-rw-r--r-- | platform/debian/conffiles | 3 | ||||
-rw-r--r-- | seamonkey.profile | 30 |
5 files changed, 8 insertions, 31 deletions
diff --git a/Makefile.in b/Makefile.in index 1de44c578..2a03e6fdf 100644 --- a/Makefile.in +++ b/Makefile.in | |||
@@ -129,6 +129,8 @@ realinstall: | |||
129 | install -c -m 0644 .etc/rtorrent.profile $(DESTDIR)/$(sysconfdir)/firejail/. | 129 | install -c -m 0644 .etc/rtorrent.profile $(DESTDIR)/$(sysconfdir)/firejail/. |
130 | install -c -m 0644 .etc/parole.profile $(DESTDIR)/$(sysconfdir)/firejail/. | 130 | install -c -m 0644 .etc/parole.profile $(DESTDIR)/$(sysconfdir)/firejail/. |
131 | install -c -m 0644 .etc/kmail.profile $(DESTDIR)/$(sysconfdir)/firejail/. | 131 | install -c -m 0644 .etc/kmail.profile $(DESTDIR)/$(sysconfdir)/firejail/. |
132 | install -c -m 0644 .etc/seamonkey.profile $(DESTDIR)/$(sysconfdir)/firejail/. | ||
133 | install -c -m 0644 .etc/seamonkey-bin.profile $(DESTDIR)/$(sysconfdir)/firejail/. | ||
132 | bash -c "if [ ! -f $(DESTDIR)/$(sysconfdir)/firejail/login.users ]; then install -c -m 0644 etc/login.users $(DESTDIR)/$(sysconfdir)/firejail/.; fi;" | 134 | bash -c "if [ ! -f $(DESTDIR)/$(sysconfdir)/firejail/login.users ]; then install -c -m 0644 etc/login.users $(DESTDIR)/$(sysconfdir)/firejail/.; fi;" |
133 | rm -fr .etc | 135 | rm -fr .etc |
134 | # man pages | 136 | # man pages |
@@ -18,6 +18,8 @@ License: GPL v2 | |||
18 | Firejail Authors: | 18 | Firejail Authors: |
19 | 19 | ||
20 | netblue30 (netblue30@yahoo.com) | 20 | netblue30 (netblue30@yahoo.com) |
21 | mahdi1234 (https://github.com/mahdi1234) | ||
22 | - Seamonkey profiles | ||
21 | Ivan Kozik (https://github.com/ivan) | 23 | Ivan Kozik (https://github.com/ivan) |
22 | - speed up sandbox exit | 24 | - speed up sandbox exit |
23 | Christian Stadelmann (https://github.com/genodeftest) | 25 | Christian Stadelmann (https://github.com/genodeftest) |
@@ -3,7 +3,7 @@ firejail (0.9.37) baseline; urgency=low | |||
3 | * security profiles fixes | 3 | * security profiles fixes |
4 | * dynamic allocation of noblacklist buffer | 4 | * dynamic allocation of noblacklist buffer |
5 | * --ip6 option - IPv6 support | 5 | * --ip6 option - IPv6 support |
6 | * added KMail profile | 6 | * added KMail, Seamonkey profiles |
7 | * --join command enhancement (--join-network, --join-filesystem) | 7 | * --join command enhancement (--join-network, --join-filesystem) |
8 | * symlink invocation | 8 | * symlink invocation |
9 | -- netblue30 <netblue30@yahoo.com> | 9 | -- netblue30 <netblue30@yahoo.com> |
diff --git a/platform/debian/conffiles b/platform/debian/conffiles index 83a4404cf..d72b5ffe6 100644 --- a/platform/debian/conffiles +++ b/platform/debian/conffiles | |||
@@ -55,3 +55,6 @@ | |||
55 | /etc/firejail/rtorrent.profile | 55 | /etc/firejail/rtorrent.profile |
56 | /etc/firejail/parole.profile | 56 | /etc/firejail/parole.profile |
57 | /etc/firejail/kmail.profile | 57 | /etc/firejail/kmail.profile |
58 | /etc/firejail/seamonkey.profile | ||
59 | /etc/firejail/seamonkey-bin.profile | ||
60 | |||
diff --git a/seamonkey.profile b/seamonkey.profile deleted file mode 100644 index d21efc7f5..000000000 --- a/seamonkey.profile +++ /dev/null | |||
@@ -1,30 +0,0 @@ | |||
1 | # Firejail profile for Mozilla Firefox (Iceweasel in Debian) | ||
2 | noblacklist ${HOME}/.mozilla | ||
3 | include /etc/firejail/disable-mgmt.inc | ||
4 | include /etc/firejail/disable-secret.inc | ||
5 | include /etc/firejail/disable-common.inc | ||
6 | include /etc/firejail/disable-devel.inc | ||
7 | caps.drop all | ||
8 | seccomp | ||
9 | protocol unix,inet,inet6,netlink | ||
10 | netfilter | ||
11 | tracelog | ||
12 | noroot | ||
13 | whitelist ${DOWNLOADS} | ||
14 | whitelist ~/.mozilla/seamonkey | ||
15 | whitelist ~/.cache/mozilla/seamonkey | ||
16 | whitelist ~/dwhelper | ||
17 | whitelist ~/.zotero | ||
18 | whitelist ~/.lastpass | ||
19 | whitelist ~/.vimperatorrc | ||
20 | whitelist ~/.vimperator | ||
21 | whitelist ~/.pentadactylrc | ||
22 | whitelist ~/.pentadactyl | ||
23 | whitelist ~/.keysnail.js | ||
24 | whitelist ~/.config/gnome-mplayer | ||
25 | whitelist ~/.cache/gnome-mplayer/plugin | ||
26 | include /etc/firejail/whitelist-common.inc | ||
27 | |||
28 | # experimental features | ||
29 | #private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse | ||
30 | |||