aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--etc/deluge.profile9
-rw-r--r--etc/disable-programs.inc3
-rw-r--r--etc/qbittorrent.profile13
-rw-r--r--etc/transmission-gtk.profile7
-rw-r--r--etc/transmission-qt.profile7
-rw-r--r--etc/whitelist-common.inc2
6 files changed, 40 insertions, 1 deletions
diff --git a/etc/deluge.profile b/etc/deluge.profile
index 71cf9442f..db2d339c7 100644
--- a/etc/deluge.profile
+++ b/etc/deluge.profile
@@ -5,13 +5,20 @@ include /etc/firejail/globals.local
5# Persistent customizations should go in a .local file. 5# Persistent customizations should go in a .local file.
6include /etc/firejail/deluge.local 6include /etc/firejail/deluge.local
7 7
8# deluge bittorrernt client profile 8# deluge bittorrent client profile
9noblacklist ${HOME}/.config/deluge
10
9include /etc/firejail/disable-common.inc 11include /etc/firejail/disable-common.inc
10include /etc/firejail/disable-programs.inc 12include /etc/firejail/disable-programs.inc
11# deluge is using python on Debian 13# deluge is using python on Debian
12#include /etc/firejail/disable-devel.inc 14#include /etc/firejail/disable-devel.inc
13include /etc/firejail/disable-passwdmgr.inc 15include /etc/firejail/disable-passwdmgr.inc
14 16
17mkdir ${HOME}/.config/deluge
18whitelist ${HOME}/.config/deluge
19whitelist ${DOWNLOADS}
20include /etc/firejail/whitelist-common.inc
21
15caps.drop all 22caps.drop all
16netfilter 23netfilter
17nonewprivs 24nonewprivs
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index df7d8714e..12f6d6d6d 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -69,6 +69,7 @@ blacklist ${HOME}/.config/clipit
69blacklist ${HOME}/.config/cmus 69blacklist ${HOME}/.config/cmus
70blacklist ${HOME}/.config/darktable 70blacklist ${HOME}/.config/darktable
71blacklist ${HOME}/.config/deadbeef 71blacklist ${HOME}/.config/deadbeef
72blacklist ${HOME}/.config/deluge
72blacklist ${HOME}/.config/dolphinrc 73blacklist ${HOME}/.config/dolphinrc
73blacklist ${HOME}/.config/dragonplayerrc 74blacklist ${HOME}/.config/dragonplayerrc
74blacklist ${HOME}/.config/enchant 75blacklist ${HOME}/.config/enchant
@@ -124,6 +125,7 @@ blacklist ${HOME}/.config/pix
124blacklist ${HOME}/.config/pluma 125blacklist ${HOME}/.config/pluma
125blacklist ${HOME}/.config/psi+ 126blacklist ${HOME}/.config/psi+
126blacklist ${HOME}/.config/ristretto 127blacklist ${HOME}/.config/ristretto
128blacklist ${HOME}/.config/qBittorrent
127blacklist ${HOME}/.config/qpdfview 129blacklist ${HOME}/.config/qpdfview
128blacklist ${HOME}/.config/qt5ct 130blacklist ${HOME}/.config/qt5ct
129blacklist ${HOME}/.config/qupzilla 131blacklist ${HOME}/.config/qupzilla
@@ -369,6 +371,7 @@ blacklist ${HOME}/.cache/netsurf
369blacklist ${HOME}/.cache/opera 371blacklist ${HOME}/.cache/opera
370blacklist ${HOME}/.cache/opera-beta 372blacklist ${HOME}/.cache/opera-beta
371blacklist ${HOME}/.cache/org.gnome.Books 373blacklist ${HOME}/.cache/org.gnome.Books
374blacklist ${HOME}/.cache/qBittorrent
372blacklist ${HOME}/.cache/qutebrowser 375blacklist ${HOME}/.cache/qutebrowser
373blacklist ${HOME}/.cache/simple-scan 376blacklist ${HOME}/.cache/simple-scan
374blacklist ${HOME}/.cache/slimjet 377blacklist ${HOME}/.cache/slimjet
diff --git a/etc/qbittorrent.profile b/etc/qbittorrent.profile
index 72c6b9491..b696c207f 100644
--- a/etc/qbittorrent.profile
+++ b/etc/qbittorrent.profile
@@ -7,11 +7,24 @@ include /etc/firejail/qbittorrent.local
7 7
8# qbittorrent bittorrent profile 8# qbittorrent bittorrent profile
9noblacklist ~/.config/qt5ct 9noblacklist ~/.config/qt5ct
10noblacklist ~/.config/qBittorrent
11noblacklist ~/.cache/qBittorrent
12
10include /etc/firejail/disable-common.inc 13include /etc/firejail/disable-common.inc
11include /etc/firejail/disable-programs.inc 14include /etc/firejail/disable-programs.inc
12include /etc/firejail/disable-devel.inc 15include /etc/firejail/disable-devel.inc
13include /etc/firejail/disable-passwdmgr.inc 16include /etc/firejail/disable-passwdmgr.inc
14 17
18mkdir ~/.local/share/data/qBittorrent
19whitelist ~/.local/share/data/qBittorrent
20whitelist ~/.config/qt5ct
21mkdir ~/.config/qBittorrent
22whitelist ~/.config/qBittorrent
23mkdir ~/.cache/qBittorrent
24whitelist ~/.cache/qBittorrent
25whitelist ${DOWNLOADS}
26include /etc/firejail/whitelist-common.inc
27
15caps.drop all 28caps.drop all
16machine-id 29machine-id
17netfilter 30netfilter
diff --git a/etc/transmission-gtk.profile b/etc/transmission-gtk.profile
index 5834b7602..84d01179c 100644
--- a/etc/transmission-gtk.profile
+++ b/etc/transmission-gtk.profile
@@ -14,6 +14,13 @@ include /etc/firejail/disable-programs.inc
14include /etc/firejail/disable-devel.inc 14include /etc/firejail/disable-devel.inc
15include /etc/firejail/disable-passwdmgr.inc 15include /etc/firejail/disable-passwdmgr.inc
16 16
17mkdir ~/.config/transmission
18whitelist ~/.config/transmission
19mkdir ~/.cache/transmission
20whitelist ~/.cache/transmission
21whitelist ${DOWNLOADS}
22include /etc/firejail/whitelist-common.inc
23
17caps.drop all 24caps.drop all
18netfilter 25netfilter
19nonewprivs 26nonewprivs
diff --git a/etc/transmission-qt.profile b/etc/transmission-qt.profile
index f933c9e62..70a5af575 100644
--- a/etc/transmission-qt.profile
+++ b/etc/transmission-qt.profile
@@ -14,6 +14,13 @@ include /etc/firejail/disable-programs.inc
14include /etc/firejail/disable-devel.inc 14include /etc/firejail/disable-devel.inc
15include /etc/firejail/disable-passwdmgr.inc 15include /etc/firejail/disable-passwdmgr.inc
16 16
17mkdir ~/.config/transmission
18whitelist ~/.config/transmission
19mkdir ~/.cache/transmission
20whitelist ~/.cache/transmission
21whitelist ${DOWNLOADS}
22include /etc/firejail/whitelist-common.inc
23
17caps.drop all 24caps.drop all
18netfilter 25netfilter
19nonewprivs 26nonewprivs
diff --git a/etc/whitelist-common.inc b/etc/whitelist-common.inc
index ab05ad24a..d5d1c19ec 100644
--- a/etc/whitelist-common.inc
+++ b/etc/whitelist-common.inc
@@ -30,6 +30,8 @@ whitelist ~/.config/gtk-3.0
30whitelist ~/.themes 30whitelist ~/.themes
31whitelist ~/.kde/share/config/gtkrc 31whitelist ~/.kde/share/config/gtkrc
32whitelist ~/.kde/share/config/gtkrc-2.0 32whitelist ~/.kde/share/config/gtkrc-2.0
33whitelist ~/.gnome2
34whitelist ~/.gnome2-private
33 35
34# dconf 36# dconf
35mkdir ~/.config/dconf 37mkdir ~/.config/dconf