aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-a-l')
-rw-r--r--etc/profile-a-l/bnox.profile5
-rw-r--r--etc/profile-a-l/brave.profile6
-rw-r--r--etc/profile-a-l/chromium-browser-privacy.profile17
-rw-r--r--etc/profile-a-l/chromium-common.profile13
-rw-r--r--etc/profile-a-l/dnox.profile5
-rw-r--r--etc/profile-a-l/enox.profile5
-rw-r--r--etc/profile-a-l/flashpeak-slimjet.profile5
-rw-r--r--etc/profile-a-l/google-chrome-beta.profile5
-rw-r--r--etc/profile-a-l/google-chrome-unstable.profile5
-rw-r--r--etc/profile-a-l/google-chrome.profile5
-rw-r--r--etc/profile-a-l/inox.profile5
-rw-r--r--etc/profile-a-l/iridium.profile5
12 files changed, 80 insertions, 1 deletions
diff --git a/etc/profile-a-l/bnox.profile b/etc/profile-a-l/bnox.profile
index 031f3f4bd..6e8f0d7d1 100644
--- a/etc/profile-a-l/bnox.profile
+++ b/etc/profile-a-l/bnox.profile
@@ -5,6 +5,11 @@ include bnox.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8# Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
9ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc
12
8noblacklist ${HOME}/.cache/bnox 13noblacklist ${HOME}/.cache/bnox
9noblacklist ${HOME}/.config/bnox 14noblacklist ${HOME}/.config/bnox
10 15
diff --git a/etc/profile-a-l/brave.profile b/etc/profile-a-l/brave.profile
index 35c59f5a3..904d3e94f 100644
--- a/etc/profile-a-l/brave.profile
+++ b/etc/profile-a-l/brave.profile
@@ -8,6 +8,12 @@ include globals.local
8 8
9# noexec /tmp is included in chromium-common.profile and breaks Brave 9# noexec /tmp is included in chromium-common.profile and breaks Brave
10ignore noexec /tmp 10ignore noexec /tmp
11# TOR is installed in ${HOME}
12ignore noexec ${HOME}
13# Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
14ignore whitelist /usr/share/chromium
15ignore include whitelist-runuser-common.inc
16ignore include whitelist-usr-share-common.inc
11 17
12noblacklist ${HOME}/.cache/BraveSoftware 18noblacklist ${HOME}/.cache/BraveSoftware
13noblacklist ${HOME}/.config/BraveSoftware 19noblacklist ${HOME}/.config/BraveSoftware
diff --git a/etc/profile-a-l/chromium-browser-privacy.profile b/etc/profile-a-l/chromium-browser-privacy.profile
new file mode 100644
index 000000000..09eaa2d12
--- /dev/null
+++ b/etc/profile-a-l/chromium-browser-privacy.profile
@@ -0,0 +1,17 @@
1# Firejail profile for chromium-browser-privacy
2# This file is overwritten after every install/update
3# Persistent local customizations
4include chromium-browser-privacy.local
5
6noblacklist ${HOME}/.cache/ungoogled-chromium
7noblacklist ${HOME}/.config/ungoogled-chromium
8
9mkdir ${HOME}/.cache/ungoogled-chromium
10mkdir ${HOME}/.config/ungoogled-chromium
11whitelist ${HOME}/.cache/ungoogled-chromium
12whitelist ${HOME}/.config/ungoogled-chromium
13
14# private-bin basename,bash,chromium-browser-privacy,dirname,mkdir,readlink,sed,touch,which,xdg-settings
15
16# Redirect
17include chromium.profile
diff --git a/etc/profile-a-l/chromium-common.profile b/etc/profile-a-l/chromium-common.profile
index 899400d25..6a9cf99b0 100644
--- a/etc/profile-a-l/chromium-common.profile
+++ b/etc/profile-a-l/chromium-common.profile
@@ -16,16 +16,25 @@ include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
17include disable-exec.inc 17include disable-exec.inc
18include disable-interpreters.inc 18include disable-interpreters.inc
19# include disable-passwdmgr.inc
19include disable-programs.inc 20include disable-programs.inc
21include disable-xdg.inc
20 22
21mkdir ${HOME}/.pki 23mkdir ${HOME}/.pki
22mkdir ${HOME}/.local/share/pki 24mkdir ${HOME}/.local/share/pki
23whitelist ${DOWNLOADS} 25whitelist ${DOWNLOADS}
24whitelist ${HOME}/.pki 26whitelist ${HOME}/.pki
25whitelist ${HOME}/.local/share/pki 27whitelist ${HOME}/.local/share/pki
28whitelist /usr/share/chromium
26include whitelist-common.inc 29include whitelist-common.inc
30include whitelist-runuser-common.inc
31include whitelist-usr-share-common.inc
27include whitelist-var-common.inc 32include whitelist-var-common.inc
28 33
34# Uncomment the next line (or add it to your chromium-common.local)
35# if your kernel allows unprivileged userns clone.
36#include chromium-common-hardened.inc
37
29apparmor 38apparmor
30caps.keep sys_admin,sys_chroot 39caps.keep sys_admin,sys_chroot
31netfilter 40netfilter
@@ -36,8 +45,10 @@ notv
36shell none 45shell none
37 46
38disable-mnt 47disable-mnt
48private-cache
39?BROWSER_DISABLE_U2F: private-dev 49?BROWSER_DISABLE_U2F: private-dev
40# private-tmp - problems with multiple browser sessions 50# problems with multiple browser sessions
51#private-tmp
41 52
42# prevents access to passwords saved in GNOME Keyring and KWallet, also breaks Gnome connector 53# prevents access to passwords saved in GNOME Keyring and KWallet, also breaks Gnome connector
43# dbus-user none 54# dbus-user none
diff --git a/etc/profile-a-l/dnox.profile b/etc/profile-a-l/dnox.profile
index e02395771..51ba6f8b7 100644
--- a/etc/profile-a-l/dnox.profile
+++ b/etc/profile-a-l/dnox.profile
@@ -5,6 +5,11 @@ include dnox.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8# Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
9ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc
12
8noblacklist ${HOME}/.cache/dnox 13noblacklist ${HOME}/.cache/dnox
9noblacklist ${HOME}/.config/dnox 14noblacklist ${HOME}/.config/dnox
10 15
diff --git a/etc/profile-a-l/enox.profile b/etc/profile-a-l/enox.profile
index d8ac8b24a..d982433e2 100644
--- a/etc/profile-a-l/enox.profile
+++ b/etc/profile-a-l/enox.profile
@@ -5,6 +5,11 @@ include enox.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8# Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
9ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc
12
8noblacklist ${HOME}/.cache/Enox 13noblacklist ${HOME}/.cache/Enox
9noblacklist ${HOME}/.config/Enox 14noblacklist ${HOME}/.config/Enox
10 15
diff --git a/etc/profile-a-l/flashpeak-slimjet.profile b/etc/profile-a-l/flashpeak-slimjet.profile
index b841bce75..310fb378f 100644
--- a/etc/profile-a-l/flashpeak-slimjet.profile
+++ b/etc/profile-a-l/flashpeak-slimjet.profile
@@ -5,6 +5,11 @@ include flashpeak-slimjet.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8# Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
9ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc
12
8noblacklist ${HOME}/.cache/slimjet 13noblacklist ${HOME}/.cache/slimjet
9noblacklist ${HOME}/.config/slimjet 14noblacklist ${HOME}/.config/slimjet
10 15
diff --git a/etc/profile-a-l/google-chrome-beta.profile b/etc/profile-a-l/google-chrome-beta.profile
index a62e4cf74..ebe5e870b 100644
--- a/etc/profile-a-l/google-chrome-beta.profile
+++ b/etc/profile-a-l/google-chrome-beta.profile
@@ -5,6 +5,11 @@ include google-chrome-beta.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8# Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
9ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc
12
8noblacklist ${HOME}/.cache/google-chrome-beta 13noblacklist ${HOME}/.cache/google-chrome-beta
9noblacklist ${HOME}/.config/google-chrome-beta 14noblacklist ${HOME}/.config/google-chrome-beta
10 15
diff --git a/etc/profile-a-l/google-chrome-unstable.profile b/etc/profile-a-l/google-chrome-unstable.profile
index 14547eab2..4d303f71b 100644
--- a/etc/profile-a-l/google-chrome-unstable.profile
+++ b/etc/profile-a-l/google-chrome-unstable.profile
@@ -5,6 +5,11 @@ include google-chrome-unstable.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8# Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
9ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc
12
8noblacklist ${HOME}/.cache/google-chrome-unstable 13noblacklist ${HOME}/.cache/google-chrome-unstable
9noblacklist ${HOME}/.config/google-chrome-unstable 14noblacklist ${HOME}/.config/google-chrome-unstable
10 15
diff --git a/etc/profile-a-l/google-chrome.profile b/etc/profile-a-l/google-chrome.profile
index 66f76caa0..ed2595f72 100644
--- a/etc/profile-a-l/google-chrome.profile
+++ b/etc/profile-a-l/google-chrome.profile
@@ -5,6 +5,11 @@ include google-chrome.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8# Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
9ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc
12
8noblacklist ${HOME}/.cache/google-chrome 13noblacklist ${HOME}/.cache/google-chrome
9noblacklist ${HOME}/.config/google-chrome 14noblacklist ${HOME}/.config/google-chrome
10 15
diff --git a/etc/profile-a-l/inox.profile b/etc/profile-a-l/inox.profile
index 1b3db73b4..a5cac12f2 100644
--- a/etc/profile-a-l/inox.profile
+++ b/etc/profile-a-l/inox.profile
@@ -5,6 +5,11 @@ include inox.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8# Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
9ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc
12
8noblacklist ${HOME}/.cache/inox 13noblacklist ${HOME}/.cache/inox
9noblacklist ${HOME}/.config/inox 14noblacklist ${HOME}/.config/inox
10 15
diff --git a/etc/profile-a-l/iridium.profile b/etc/profile-a-l/iridium.profile
index ebb39b0a3..3037d00e9 100644
--- a/etc/profile-a-l/iridium.profile
+++ b/etc/profile-a-l/iridium.profile
@@ -5,6 +5,11 @@ include iridium.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8# Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565
9ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc
12
8noblacklist ${HOME}/.cache/iridium 13noblacklist ${HOME}/.cache/iridium
9noblacklist ${HOME}/.config/iridium 14noblacklist ${HOME}/.config/iridium
10 15
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-14 23:07:15 +0000