aboutsummaryrefslogtreecommitdiffstats
path: root/etc/icedove.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/icedove.profile')
-rw-r--r--etc/icedove.profile27
1 files changed, 13 insertions, 14 deletions
diff --git a/etc/icedove.profile b/etc/icedove.profile
index a3192c491..3931fd0c0 100644
--- a/etc/icedove.profile
+++ b/etc/icedove.profile
@@ -1,27 +1,26 @@
1# Persistent global definitions go here 1# Firejail profile for icedove
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/icedove.local 4include /etc/firejail/icedove.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7 7
8# Firejail profile for Mozilla Thunderbird (Icedove in Debian Stable)
9# Users have icedove set to open a browser by clicking a link in an email 8# Users have icedove set to open a browser by clicking a link in an email
10# We are not allowed to blacklist browser-specific directories 9# We are not allowed to blacklist browser-specific directories
11 10
11noblacklist ~/.cache/icedove
12noblacklist ~/.gnupg 12noblacklist ~/.gnupg
13mkdir ~/.gnupg
14whitelist ~/.gnupg
15
16noblacklist ~/.icedove 13noblacklist ~/.icedove
17mkdir ~/.icedove
18whitelist ~/.icedove
19 14
20noblacklist ~/.cache/icedove
21mkdir ~/.cache/icedove 15mkdir ~/.cache/icedove
16mkdir ~/.gnupg
17mkdir ~/.icedove
22whitelist ~/.cache/icedove 18whitelist ~/.cache/icedove
19whitelist ~/.gnupg
20whitelist ~/.icedove
21include /etc/firejail/whitelist-common.inc
23 22
24# allow browsers
25ignore private-tmp 23ignore private-tmp
24
25# allow browsers
26include /etc/firejail/firefox.profile 26include /etc/firejail/firefox.profile
27#include /etc/firejail/chromium.profile - chromium runs as suid!