diff options
-rw-r--r-- | README | 3 | ||||
-rw-r--r-- | README.md | 2 | ||||
-rw-r--r-- | RELNOTES | 3 | ||||
-rw-r--r-- | etc/disable-programs.inc | 2 | ||||
-rw-r--r-- | etc/keepassxc-cli.profile | 12 | ||||
-rw-r--r-- | etc/keepassxc-proxy.profile | 11 | ||||
-rw-r--r-- | etc/keepassxc.profile | 4 | ||||
-rw-r--r-- | etc/newsbeuter.profile | 21 | ||||
-rw-r--r-- | src/firecfg/firecfg.config | 4 |
9 files changed, 57 insertions, 5 deletions
@@ -571,7 +571,8 @@ rusty-snake (https://github.com/rusty-snake) | |||
571 | - added profiles: kid3-qt, kid3-cli, anki, utox, mp3splt, mp3wrap | 571 | - added profiles: kid3-qt, kid3-cli, anki, utox, mp3splt, mp3wrap |
572 | - added profiles: oggsplt, flacsplt, cheese, inkview, mp3splt-gtk | 572 | - added profiles: oggsplt, flacsplt, cheese, inkview, mp3splt-gtk |
573 | - added profiles: ktouch, yelp, klatexformula, klatexformula_cmdl | 573 | - added profiles: ktouch, yelp, klatexformula, klatexformula_cmdl |
574 | - added profiles: pandoc, gnome-sound-recorder, godot | 574 | - added profiles: pandoc, gnome-sound-recorder, godot, newsbeuter |
575 | - added profiles: keepassxc-cli, keepassxc-proxy | ||
575 | - many profile fixing and hardening | 576 | - many profile fixing and hardening |
576 | - some typo fixes | 577 | - some typo fixes |
577 | - added profile templates | 578 | - added profile templates |
@@ -111,4 +111,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe | |||
111 | 111 | ||
112 | ## New profiles: | 112 | ## New profiles: |
113 | 113 | ||
114 | klatexformula, klatexformula_cmdl, links, pandoc, qgis, teams-for-linux, xlinks, OpenArena, gnome-sound-recorder, godot, tcpdump, tshark | 114 | klatexformula, klatexformula_cmdl, links, pandoc, qgis, teams-for-linux, xlinks, OpenArena, gnome-sound-recorder, godot, tcpdump, tshark, keepassxc-cli, keepassxc-proxy, newsbeuter |
@@ -3,7 +3,8 @@ firejail (0.9.61) baseline; urgency=low | |||
3 | * profile templates | 3 | * profile templates |
4 | * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks | 4 | * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks |
5 | * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder | 5 | * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder |
6 | * new profiles: godot, tcpdump, tshark | 6 | * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli |
7 | * new profiles: keepassxc-proxy | ||
7 | -- netblue30 <netblue30@yahoo.com> Sat, 1 Jun 2019 08:00:00 -0500 | 8 | -- netblue30 <netblue30@yahoo.com> Sat, 1 Jun 2019 08:00:00 -0500 |
8 | 9 | ||
9 | firejail (0.9.60) baseline; urgency=low | 10 | firejail (0.9.60) baseline; urgency=low |
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 356c8209c..fb7e02d0b 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -239,6 +239,7 @@ blacklist ${HOME}/.config/nano | |||
239 | blacklist ${HOME}/.config/nautilus | 239 | blacklist ${HOME}/.config/nautilus |
240 | blacklist ${HOME}/.config/nemo | 240 | blacklist ${HOME}/.config/nemo |
241 | blacklist ${HOME}/.config/netsurf | 241 | blacklist ${HOME}/.config/netsurf |
242 | blacklist ${HOME}/.config/newsbeuter | ||
242 | blacklist ${HOME}/.config/nheko | 243 | blacklist ${HOME}/.config/nheko |
243 | blacklist ${HOME}/.config/NitroShare | 244 | blacklist ${HOME}/.config/NitroShare |
244 | blacklist ${HOME}/.config/nomacs | 245 | blacklist ${HOME}/.config/nomacs |
@@ -574,6 +575,7 @@ blacklist ${HOME}/.multimc5 | |||
574 | blacklist ${HOME}/.nanorc | 575 | blacklist ${HOME}/.nanorc |
575 | blacklist ${HOME}/.netactview | 576 | blacklist ${HOME}/.netactview |
576 | blacklist ${HOME}/.neverball | 577 | blacklist ${HOME}/.neverball |
578 | blacklist ${HOME}/.newsbeuter | ||
577 | blacklist ${HOME}/.newsboat | 579 | blacklist ${HOME}/.newsboat |
578 | blacklist ${HOME}/.nv | 580 | blacklist ${HOME}/.nv |
579 | blacklist ${HOME}/.nylas-mail | 581 | blacklist ${HOME}/.nylas-mail |
diff --git a/etc/keepassxc-cli.profile b/etc/keepassxc-cli.profile new file mode 100644 index 000000000..6f657e7de --- /dev/null +++ b/etc/keepassxc-cli.profile | |||
@@ -0,0 +1,12 @@ | |||
1 | # Firejail profile for keepassxc-cli | ||
2 | # Description: command line interface for KeePassXC | ||
3 | # This file is overwritten after every install/update | ||
4 | # Persistent local customizations | ||
5 | include keepassxc-cli.local | ||
6 | # Persistent global definitions | ||
7 | # added by included profile | ||
8 | #include globals.local | ||
9 | |||
10 | |||
11 | # Redirect | ||
12 | include keepassxc.profile | ||
diff --git a/etc/keepassxc-proxy.profile b/etc/keepassxc-proxy.profile new file mode 100644 index 000000000..79666aee2 --- /dev/null +++ b/etc/keepassxc-proxy.profile | |||
@@ -0,0 +1,11 @@ | |||
1 | # Firejail profile for keepassxc-cli | ||
2 | # This file is overwritten after every install/update | ||
3 | # Persistent local customizations | ||
4 | include keepassxc-proxy.local | ||
5 | # Persistent global definitions | ||
6 | # added by included profile | ||
7 | #include globals.local | ||
8 | |||
9 | |||
10 | # Redirect | ||
11 | include keepassxc.profile | ||
diff --git a/etc/keepassxc.profile b/etc/keepassxc.profile index c1adfd516..6ef02ad47 100644 --- a/etc/keepassxc.profile +++ b/etc/keepassxc.profile | |||
@@ -37,11 +37,11 @@ nosound | |||
37 | notv | 37 | notv |
38 | nou2f | 38 | nou2f |
39 | novideo | 39 | novideo |
40 | protocol netlink,unix | 40 | protocol unix,netlink |
41 | seccomp | 41 | seccomp |
42 | shell none | 42 | shell none |
43 | 43 | ||
44 | private-bin keepassxc,keepassxc-proxy | 44 | private-bin keepassxc,keepassxc-cli,keepassxc-proxy |
45 | private-dev | 45 | private-dev |
46 | private-etc alternatives,fonts,ld.so.cache,machine-id | 46 | private-etc alternatives,fonts,ld.so.cache,machine-id |
47 | private-tmp | 47 | private-tmp |
diff --git a/etc/newsbeuter.profile b/etc/newsbeuter.profile new file mode 100644 index 000000000..059c2156d --- /dev/null +++ b/etc/newsbeuter.profile | |||
@@ -0,0 +1,21 @@ | |||
1 | # Firejail profile for Newsboat | ||
2 | # Description: Text based Atom/RSS feed reader | ||
3 | # This file is overwritten after every install/update | ||
4 | # Persistent local customizations | ||
5 | include newsbeuter.local | ||
6 | # Persistent global definitions | ||
7 | # added by included profile | ||
8 | #include globals.local | ||
9 | |||
10 | noblacklist ${HOME}/.config/newsbeuter | ||
11 | noblacklist ${HOME}/.newsbeuter | ||
12 | |||
13 | mkdir ${HOME}/.config/newsbeuter | ||
14 | mkdir ${HOME}/.newsbeuter | ||
15 | whitelist ${HOME}/.config/newsbeuter | ||
16 | whitelist ${HOME}/.newsbeuter | ||
17 | |||
18 | private-bin newsbeuter | ||
19 | |||
20 | # Redirect | ||
21 | include newsboat.profile | ||
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index d1855d6f7..0f00ca275 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config | |||
@@ -301,6 +301,8 @@ keepass2 | |||
301 | keepassx | 301 | keepassx |
302 | keepassx2 | 302 | keepassx2 |
303 | keepassxc | 303 | keepassxc |
304 | keepassxc-cli | ||
305 | keepassxc-proxy | ||
304 | kget | 306 | kget |
305 | kid3 | 307 | kid3 |
306 | kid3-cli | 308 | kid3-cli |
@@ -400,6 +402,7 @@ netactview | |||
400 | nethack | 402 | nethack |
401 | netsurf | 403 | netsurf |
402 | neverball | 404 | neverball |
405 | newsbeuter | ||
403 | newsboat | 406 | newsboat |
404 | nheko | 407 | nheko |
405 | nitroshare | 408 | nitroshare |
@@ -585,6 +588,7 @@ transmission-remote-gtk | |||
585 | transmission-show | 588 | transmission-show |
586 | tremulous | 589 | tremulous |
587 | truecraft | 590 | truecraft |
591 | tshark | ||
588 | tuxguitar | 592 | tuxguitar |
589 | uefitool | 593 | uefitool |
590 | uget-gtk | 594 | uget-gtk |