aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
Diffstat
-rw-r--r--README.md4
-rw-r--r--RELNOTES4
-rw-r--r--etc/disable-programs.inc8
-rw-r--r--etc/etr.profile41
-rw-r--r--etc/frozen-bubble.profile38
-rw-r--r--etc/open-invaders.profile41
-rw-r--r--etc/pingus.profile41
-rw-r--r--etc/simutrans.profile41
-rw-r--r--etc/supertux2.profile41
-rw-r--r--etc/unknown-horizons.profile40
-rw-r--r--platform/debian/conffiles6
-rw-r--r--src/firecfg/firecfg.config7
12 files changed, 310 insertions, 2 deletions
diff --git a/README.md b/README.md
index 724b2e862..765c746ed 100644
--- a/README.md
+++ b/README.md
@@ -127,4 +127,6 @@ ulimit, vhangup, vserver. This brings us to a total of 91 syscalls blacklisted b
127## New profiles: 127## New profiles:
128 128
129curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite, Geary, Liferea, peek, silentarmy, 129curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite, Geary, Liferea, peek, silentarmy,
130IntelliJ IDEA, Android Studio, electron, riot-web 130IntelliJ IDEA, Android Studio, electron, riot-web,
131Extreme Tux Racer, Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux
132
diff --git a/RELNOTES b/RELNOTES
index 84e474e73..9cdd71e8d 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -7,7 +7,9 @@ firejail (0.9.49) baseline; urgency=low
7 * enhancement: rework IP address assingment for --net options 7 * enhancement: rework IP address assingment for --net options
8 * new profiles: curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite, 8 * new profiles: curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite,
9 * new profiles: Geary, Liferea, peek, silentarmy, IntelliJ IDEA, 9 * new profiles: Geary, Liferea, peek, silentarmy, IntelliJ IDEA,
10 * new profiles: Android Studio, electron, riot-web 10 * new profiles: Android Studio, electron, riot-web, Extreme Tux Racer,
11 * new profiles: Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux
12
11 * bugfixes 13 * bugfixes
12 -- netblue30 <netblue30@yahoo.com> Mon, 12 Jun 2017 20:00:00 -0500 14 -- netblue30 <netblue30@yahoo.com> Mon, 12 Jun 2017 20:00:00 -0500
13 15
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 0a4d4c4cb..95d9b04a0 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -186,9 +186,12 @@ blacklist ${HOME}/.elinks
186blacklist ${HOME}/.emacs 186blacklist ${HOME}/.emacs
187blacklist ${HOME}/.emacs.d 187blacklist ${HOME}/.emacs.d
188blacklist ${HOME}/.filezilla 188blacklist ${HOME}/.filezilla
189blacklist ${HOME}/.emacs
190blacklist ${HOME}/.etr
189blacklist ${HOME}/.flowblade 191blacklist ${HOME}/.flowblade
190blacklist ${HOME}/.fltk 192blacklist ${HOME}/.fltk
191blacklist ${HOME}/.FontForge 193blacklist ${HOME}/.FontForge
194blacklist ${HOME}/.frozen-bubble
192blacklist ${HOME}/.gimp* 195blacklist ${HOME}/.gimp*
193blacklist ${HOME}/.git-credential-cache 196blacklist ${HOME}/.git-credential-cache
194blacklist ${HOME}/.gitconfig 197blacklist ${HOME}/.gitconfig
@@ -301,6 +304,7 @@ blacklist ${HOME}/.local/share/qpdfview
301blacklist ${HOME}/.local/share/scribus 304blacklist ${HOME}/.local/share/scribus
302blacklist ${HOME}/.local/share/spotify 305blacklist ${HOME}/.local/share/spotify
303blacklist ${HOME}/.local/share/steam 306blacklist ${HOME}/.local/share/steam
307blacklist ${HOME}/.local/share/supertux2
304blacklist ${HOME}/.local/share/telepathy 308blacklist ${HOME}/.local/share/telepathy
305blacklist ${HOME}/.local/share/torbrowser 309blacklist ${HOME}/.local/share/torbrowser
306blacklist ${HOME}/.local/share/totem 310blacklist ${HOME}/.local/share/totem
@@ -325,16 +329,19 @@ blacklist ${HOME}/.mutt/muttrc
325blacklist ${HOME}/.muttrc 329blacklist ${HOME}/.muttrc
326blacklist ${HOME}/.nv 330blacklist ${HOME}/.nv
327blacklist ${HOME}/.nylas-mail 331blacklist ${HOME}/.nylas-mail
332blacklist ${HOME}/.openinvaders
328blacklist ${HOME}/.openshot 333blacklist ${HOME}/.openshot
329blacklist ${HOME}/.openshot_qt 334blacklist ${HOME}/.openshot_qt
330blacklist ${HOME}/.opera 335blacklist ${HOME}/.opera
331blacklist ${HOME}/.opera-beta 336blacklist ${HOME}/.opera-beta
337blacklist ${HOME}/.pingus
332blacklist ${HOME}/.purple 338blacklist ${HOME}/.purple
333blacklist ${HOME}/.qemu-launcher 339blacklist ${HOME}/.qemu-launcher
334blacklist ${HOME}/.remmina 340blacklist ${HOME}/.remmina
335blacklist ${HOME}/.retroshare 341blacklist ${HOME}/.retroshare
336blacklist ${HOME}/.scribus 342blacklist ${HOME}/.scribus
337blacklist ${HOME}/.scribusrc 343blacklist ${HOME}/.scribusrc
344blacklist ${HOME}/.simutrans
338blacklist ${HOME}/.steam 345blacklist ${HOME}/.steam
339blacklist ${HOME}/.steampath 346blacklist ${HOME}/.steampath
340blacklist ${HOME}/.steampid 347blacklist ${HOME}/.steampid
@@ -347,6 +354,7 @@ blacklist ${HOME}/.tconn
347blacklist ${HOME}/.thunderbird 354blacklist ${HOME}/.thunderbird
348blacklist ${HOME}/.tooling 355blacklist ${HOME}/.tooling
349blacklist ${HOME}/.ts3client 356blacklist ${HOME}/.ts3client
357blacklist ${HOME}/.unknow-horizons
350blacklist ${HOME}/.viking 358blacklist ${HOME}/.viking
351blacklist ${HOME}/.viking-maps 359blacklist ${HOME}/.viking-maps
352blacklist ${HOME}/.vst 360blacklist ${HOME}/.vst
diff --git a/etc/etr.profile b/etc/etr.profile
new file mode 100644
index 000000000..d7b747995
--- /dev/null
+++ b/etc/etr.profile
@@ -0,0 +1,41 @@
1# Persistent global definitions go here
2include /etc/firejail/globals.local
3
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/etr.local
7
8################################
9# Extreme Tux Racer profile
10################################
11
12noblacklist ~/.etr
13mkdir ~/.etr
14whitelist ~/.etr
15include /etc/firejail/whitelist-common.inc
16
17include /etc/firejail/disable-common.inc
18include /etc/firejail/disable-programs.inc
19include /etc/firejail/disable-passwdmgr.inc
20
21caps.drop all
22nonewprivs
23noroot
24protocol unix,netlink
25seccomp
26
27#
28# depending on your usage, you can enable some of the commands below:
29#
30net none
31nogroups
32shell none
33#private-bin etr
34# private-etc none
35private-dev
36private-tmp
37# nosound
38
39
40
41
diff --git a/etc/frozen-bubble.profile b/etc/frozen-bubble.profile
new file mode 100644
index 000000000..52f8e5b3e
--- /dev/null
+++ b/etc/frozen-bubble.profile
@@ -0,0 +1,38 @@
1# Persistent global definitions go here
2include /etc/firejail/globals.local
3
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/frozen-bubble.local
7
8################################
9# Frozen Bubble profile
10################################
11
12noblacklist ~/.frozen-bubble
13mkdir ~/.frozen-bubble
14whitelist ~/.frozen-bubble
15include /etc/firejail/whitelist-common.inc
16
17include /etc/firejail/disable-common.inc
18include /etc/firejail/disable-programs.inc
19include /etc/firejail/disable-passwdmgr.inc
20
21caps.drop all
22nonewprivs
23noroot
24protocol unix,netlink
25seccomp
26
27#
28# depending on your usage, you can enable some of the commands below:
29#
30net none
31nogroups
32shell none
33#private-bin frozen-bubble
34# private-etc none
35private-dev
36private-tmp
37# nosound
38
diff --git a/etc/open-invaders.profile b/etc/open-invaders.profile
new file mode 100644
index 000000000..f95b0f5a2
--- /dev/null
+++ b/etc/open-invaders.profile
@@ -0,0 +1,41 @@
1# Persistent global definitions go here
2include /etc/firejail/globals.local
3
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/open-invaders.local
7
8################################
9# open-invaders profile
10################################
11
12noblacklist ~/.openinvaders
13mkdir ~/.openinvaders
14whitelist ~/.openinvaders
15include /etc/firejail/whitelist-common.inc
16
17include /etc/firejail/disable-common.inc
18include /etc/firejail/disable-programs.inc
19include /etc/firejail/disable-passwdmgr.inc
20
21caps.drop all
22nonewprivs
23noroot
24protocol unix,netlink
25seccomp
26
27#
28# depending on your usage, you can enable some of the commands below:
29#
30net none
31nogroups
32shell none
33#private-bin open-invaders
34# private-etc none
35private-dev
36private-tmp
37# nosound
38
39
40
41
diff --git a/etc/pingus.profile b/etc/pingus.profile
new file mode 100644
index 000000000..b3b479046
--- /dev/null
+++ b/etc/pingus.profile
@@ -0,0 +1,41 @@
1# Persistent global definitions go here
2include /etc/firejail/globals.local
3
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/pingus.local
7
8################################
9# Pinugs profile
10################################
11
12noblacklist ~/.pingus
13mkdir ~/.pingus
14whitelist ~/.pingus
15include /etc/firejail/whitelist-common.inc
16
17include /etc/firejail/disable-common.inc
18include /etc/firejail/disable-programs.inc
19include /etc/firejail/disable-passwdmgr.inc
20
21caps.drop all
22nonewprivs
23noroot
24protocol unix,netlink
25seccomp
26
27#
28# depending on your usage, you can enable some of the commands below:
29#
30net none
31nogroups
32shell none
33#private-bin pingus
34# private-etc none
35private-dev
36private-tmp
37# nosound
38
39
40
41
diff --git a/etc/simutrans.profile b/etc/simutrans.profile
new file mode 100644
index 000000000..b1df0ba28
--- /dev/null
+++ b/etc/simutrans.profile
@@ -0,0 +1,41 @@
1# Persistent global definitions go here
2include /etc/firejail/globals.local
3
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/simutrans.local
7
8################################
9# simutrans profile
10################################
11
12noblacklist ~/.simutrans
13mkdir ~/.simutrans
14whitelist ~/.simutrans
15include /etc/firejail/whitelist-common.inc
16
17include /etc/firejail/disable-common.inc
18include /etc/firejail/disable-programs.inc
19include /etc/firejail/disable-passwdmgr.inc
20
21caps.drop all
22nonewprivs
23noroot
24protocol unix
25seccomp
26
27#
28# depending on your usage, you can enable some of the commands below:
29#
30net none
31nogroups
32shell none
33#private-bin simutrans
34# private-etc none
35private-dev
36private-tmp
37# nosound
38
39
40
41
diff --git a/etc/supertux2.profile b/etc/supertux2.profile
new file mode 100644
index 000000000..276e91b05
--- /dev/null
+++ b/etc/supertux2.profile
@@ -0,0 +1,41 @@
1# Persistent global definitions go here
2include /etc/firejail/globals.local
3
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/supertux2.local
7
8################################
9# SuperTux profile
10################################
11
12noblacklist ~/.local/share/supertux2
13mkdir ~/.local/share/supertux2
14whitelist ~/.local/share/supertux2
15include /etc/firejail/whitelist-common.inc
16
17include /etc/firejail/disable-common.inc
18include /etc/firejail/disable-programs.inc
19include /etc/firejail/disable-passwdmgr.inc
20
21caps.drop all
22nonewprivs
23noroot
24protocol unix,netlink
25seccomp
26
27#
28# depending on your usage, you can enable some of the commands below:
29#
30net none
31nogroups
32shell none
33#private-bin supertux2
34# private-etc none
35private-dev
36private-tmp
37# nosound
38
39
40
41
diff --git a/etc/unknown-horizons.profile b/etc/unknown-horizons.profile
new file mode 100644
index 000000000..c4e535070
--- /dev/null
+++ b/etc/unknown-horizons.profile
@@ -0,0 +1,40 @@
1# Persistent global definitions go here
2include /etc/firejail/globals.local
3
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/unknown-horizons.local
7
8################################
9# Extreme Tux Racer profile
10################################
11
12noblacklist ~/.unknown-horizons
13mkdir ~/.unknown-horizons
14whitelist ~/.unknown-horizons
15include /etc/firejail/whitelist-common.inc
16
17include /etc/firejail/disable-common.inc
18include /etc/firejail/disable-programs.inc
19include /etc/firejail/disable-passwdmgr.inc
20
21caps.drop all
22nonewprivs
23noroot
24protocol unix,netlink,inet,inet6
25seccomp
26
27#
28# depending on your usage, you can enable some of the commands below:
29#
30nogroups
31shell none
32#private-bin unknown-horizons
33# private-etc none
34private-dev
35private-tmp
36# nosound
37
38
39
40
diff --git a/platform/debian/conffiles b/platform/debian/conffiles
index 852d54c0e..a2e02dd6a 100644
--- a/platform/debian/conffiles
+++ b/platform/debian/conffiles
@@ -321,3 +321,9 @@
321/etc/firejail/kwrite.profile 321/etc/firejail/kwrite.profile
322/etc/firejail/geary.profile 322/etc/firejail/geary.profile
323/etc/firejail/liferea.profile 323/etc/firejail/liferea.profile
324/etc/firejail/etr.profile
325/etc/firejail/frozen-bubble.profile
326/etc/firejail/open-invaders.profile
327/etc/firejail/pingus.profile
328/etc/firejail/simutrans.profile
329/etc/firejail/supertux2.profile
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 025f239ba..b3614bf64 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -59,6 +59,7 @@ empathy
59eog 59eog
60eom 60eom
61epiphany 61epiphany
62etr
62evince 63evince
63evolution 64evolution
64exiftool 65exiftool
@@ -71,6 +72,7 @@ firefox-esr
71flashpeak-slimjet 72flashpeak-slimjet
72flowblade 73flowblade
73fontforge 74fontforge
75frozen-bubble
74FossaMail 76FossaMail
75gajim 77gajim
76galculator 78galculator
@@ -182,6 +184,7 @@ netsurf
182nylas 184nylas
183odt2txt 185odt2txt
184okular 186okular
187open-invaders
185openshot 188openshot
186opera 189opera
187opera-beta 190opera-beta
@@ -192,6 +195,7 @@ pdfsam
192pdftotext 195pdftotext
193peek 196peek
194pidgin 197pidgin
198pingus
195pithos 199pithos
196pix 200pix
197pluma 201pluma
@@ -215,6 +219,7 @@ scribus
215seamonkey 219seamonkey
216seamonkey-bin 220seamonkey-bin
217simple-scan 221simple-scan
222simutrans
218silentarmy 223silentarmy
219skanlite 224skanlite
220skype 225skype
@@ -229,6 +234,7 @@ start-tor-browser
229steam 234steam
230stellarium 235stellarium
231strings 236strings
237supertux2
232synfigstudio 238synfigstudio
233telegram 239telegram
234Telegram 240Telegram
@@ -241,6 +247,7 @@ transmission-qt
241transmission-show 247transmission-show
242uget-gtk 248uget-gtk
243unbound 249unbound
250unknown-horizons
244uudeview 251uudeview
245uzbl-browser 252uzbl-browser
246viewnior 253viewnior
generated by cgit v1.2.3-54-g00ecf (git 2.45.1) at 2024-05-27 16:07:27 +0000