diff options
Diffstat (limited to 'etc')
41 files changed, 91 insertions, 6 deletions
diff --git a/etc/7za.profile b/etc/7za.profile index 28e483a8c..14188e1f0 100644 --- a/etc/7za.profile +++ b/etc/7za.profile | |||
@@ -1,5 +1,6 @@ | |||
1 | # Firejail profile for 7za | 1 | # Firejail profile for 7za |
2 | # This file is overwritten after every install/update | 2 | # This file is overwritten after every install/update |
3 | quiet | ||
3 | # Persistent local customizations | 4 | # Persistent local customizations |
4 | include 7za.local | 5 | include 7za.local |
5 | # Persistent global definitions | 6 | # Persistent global definitions |
diff --git a/etc/7zr.profile b/etc/7zr.profile index 1b85badbc..2cb42fa40 100644 --- a/etc/7zr.profile +++ b/etc/7zr.profile | |||
@@ -1,5 +1,6 @@ | |||
1 | # Firejail profile for 7zr | 1 | # Firejail profile for 7zr |
2 | # This file is overwritten after every install/update | 2 | # This file is overwritten after every install/update |
3 | quiet | ||
3 | # Persistent local customizations | 4 | # Persistent local customizations |
4 | include 7zr.local | 5 | include 7zr.local |
5 | # Persistent global definitions | 6 | # Persistent global definitions |
diff --git a/etc/Xephyr.profile b/etc/Xephyr.profile index 5ef75022b..ab5fdf942 100644 --- a/etc/Xephyr.profile +++ b/etc/Xephyr.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for Xephyr | 1 | # Firejail profile for Xephyr |
2 | # This file is overwritten after every install/update | 2 | # This file is overwritten after every install/update |
3 | # Persistent local customizations | 3 | # Persistent local customizations |
4 | quiet | ||
4 | include Xephyr.local | 5 | include Xephyr.local |
5 | # Persistent global definitions | 6 | # Persistent global definitions |
6 | include globals.local | 7 | include globals.local |
diff --git a/etc/Xvfb.profile b/etc/Xvfb.profile index 3ecda698e..6559be21a 100644 --- a/etc/Xvfb.profile +++ b/etc/Xvfb.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for Xvfb | 1 | # Firejail profile for Xvfb |
2 | # Description: Virtual Framebuffer 'fake' X server | 2 | # Description: Virtual Framebuffer 'fake' X server |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include Xvfb.local | 6 | include Xvfb.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/acat.profile b/etc/acat.profile index f35adf3dc..522d8db4e 100644 --- a/etc/acat.profile +++ b/etc/acat.profile | |||
@@ -1,5 +1,6 @@ | |||
1 | # Firejail profile for acat | 1 | # Firejail profile for acat |
2 | # This file is overwritten after every install/update | 2 | # This file is overwritten after every install/update |
3 | quiet | ||
3 | # Persistent local customizations | 4 | # Persistent local customizations |
4 | include acat.local | 5 | include acat.local |
5 | # Persistent global definitions | 6 | # Persistent global definitions |
diff --git a/etc/adiff.profile b/etc/adiff.profile index f22a27e79..a80886d56 100644 --- a/etc/adiff.profile +++ b/etc/adiff.profile | |||
@@ -1,5 +1,6 @@ | |||
1 | # Firejail profile for adiff | 1 | # Firejail profile for adiff |
2 | # This file is overwritten after every install/update | 2 | # This file is overwritten after every install/update |
3 | quiet | ||
3 | # Persistent local customizations | 4 | # Persistent local customizations |
4 | include adiff.local | 5 | include adiff.local |
5 | # Persistent global definitions | 6 | # Persistent global definitions |
diff --git a/etc/als.profile b/etc/als.profile index aa7f29337..5eae228b6 100644 --- a/etc/als.profile +++ b/etc/als.profile | |||
@@ -1,5 +1,6 @@ | |||
1 | # Firejail profile for als | 1 | # Firejail profile for als |
2 | # This file is overwritten after every install/update | 2 | # This file is overwritten after every install/update |
3 | quiet | ||
3 | # Persistent local customizations | 4 | # Persistent local customizations |
4 | include als.local | 5 | include als.local |
5 | # Persistent global definitions | 6 | # Persistent global definitions |
diff --git a/etc/apack.profile b/etc/apack.profile index b09d3d718..9fef911af 100644 --- a/etc/apack.profile +++ b/etc/apack.profile | |||
@@ -1,5 +1,6 @@ | |||
1 | # Firejail profile for apack | 1 | # Firejail profile for apack |
2 | # This file is overwritten after every install/update | 2 | # This file is overwritten after every install/update |
3 | quiet | ||
3 | # Persistent local customizations | 4 | # Persistent local customizations |
4 | include apack.local | 5 | include apack.local |
5 | # Persistent global definitions | 6 | # Persistent global definitions |
diff --git a/etc/arepack.profile b/etc/arepack.profile index d23fc21db..012f2f049 100644 --- a/etc/arepack.profile +++ b/etc/arepack.profile | |||
@@ -1,5 +1,6 @@ | |||
1 | # Firejail profile for arepack | 1 | # Firejail profile for arepack |
2 | # This file is overwritten after every install/update | 2 | # This file is overwritten after every install/update |
3 | quiet | ||
3 | # Persistent local customizations | 4 | # Persistent local customizations |
4 | include arepack.local | 5 | include arepack.local |
5 | # Persistent global definitions | 6 | # Persistent global definitions |
diff --git a/etc/aunpack.profile b/etc/aunpack.profile index c119ed9ad..6ce4aa491 100644 --- a/etc/aunpack.profile +++ b/etc/aunpack.profile | |||
@@ -1,5 +1,6 @@ | |||
1 | # Firejail profile for aunpack | 1 | # Firejail profile for aunpack |
2 | # This file is overwritten after every install/update | 2 | # This file is overwritten after every install/update |
3 | quiet | ||
3 | # Persistent local customizations | 4 | # Persistent local customizations |
4 | include aunpack.local | 5 | include aunpack.local |
5 | # Persistent global definitions | 6 | # Persistent global definitions |
diff --git a/etc/conplay.profile b/etc/conplay.profile index 101ce2f17..d0ad7c753 100644 --- a/etc/conplay.profile +++ b/etc/conplay.profile | |||
@@ -1,4 +1,6 @@ | |||
1 | # Firejail profile for conplay | 1 | # Firejail profile for conplay |
2 | # Description: MPEG audio player/decoder | ||
3 | # This file is overwritten after every install/update | ||
2 | # Persistent local customizations | 4 | # Persistent local customizations |
3 | include conplay.local | 5 | include conplay.local |
4 | # Persistent global definitions | 6 | # Persistent global definitions |
diff --git a/etc/dig.profile b/etc/dig.profile index 6f2c1f755..611cbf026 100644 --- a/etc/dig.profile +++ b/etc/dig.profile | |||
@@ -1,7 +1,7 @@ | |||
1 | # Firejail profile for dig | 1 | # Firejail profile for dig |
2 | # Description: DNS lookup utility | 2 | # Description: DNS lookup utility |
3 | quiet | ||
4 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
5 | # Persistent local customizations | 5 | # Persistent local customizations |
6 | include dig.local | 6 | include dig.local |
7 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index c0bf1f8d4..a3f7c570b 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -509,6 +509,8 @@ blacklist ${HOME}/.local/share/kaffeine | |||
509 | blacklist ${HOME}/.local/share/kate | 509 | blacklist ${HOME}/.local/share/kate |
510 | blacklist ${HOME}/.local/share/kdenlive | 510 | blacklist ${HOME}/.local/share/kdenlive |
511 | blacklist ${HOME}/.local/share/kget | 511 | blacklist ${HOME}/.local/share/kget |
512 | blacklist ${HOME}/.local/share/kiwix | ||
513 | blacklist ${HOME}/.local/share/kiwix-desktop | ||
512 | blacklist ${HOME}/.local/share/klavaro | 514 | blacklist ${HOME}/.local/share/klavaro |
513 | blacklist ${HOME}/.local/share/kmail2 | 515 | blacklist ${HOME}/.local/share/kmail2 |
514 | blacklist ${HOME}/.local/share/knotes | 516 | blacklist ${HOME}/.local/share/knotes |
diff --git a/etc/dnscrypt-proxy.profile b/etc/dnscrypt-proxy.profile index c04451373..bba94e3cb 100644 --- a/etc/dnscrypt-proxy.profile +++ b/etc/dnscrypt-proxy.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for dnscrypt-proxy | 1 | # Firejail profile for dnscrypt-proxy |
2 | # Description: Tool for securing communications between a client and a DNS resolver | 2 | # Description: Tool for securing communications between a client and a DNS resolver |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include dnscrypt-proxy.local | 6 | include dnscrypt-proxy.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/dnsmasq.profile b/etc/dnsmasq.profile index daf4795c3..dfb1b61c1 100644 --- a/etc/dnsmasq.profile +++ b/etc/dnsmasq.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for dnsmasq | 1 | # Firejail profile for dnsmasq |
2 | # Description: Small caching DNS proxy and DHCP/TFTP server | 2 | # Description: Small caching DNS proxy and DHCP/TFTP server |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include dnsmasq.local | 6 | include dnsmasq.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/ffmpegthumbnailer.profile b/etc/ffmpegthumbnailer.profile index 3681c40f1..6d72c3b99 100644 --- a/etc/ffmpegthumbnailer.profile +++ b/etc/ffmpegthumbnailer.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for ffmpegthumbnailer | 1 | # Firejail profile for ffmpegthumbnailer |
2 | # Description: FFmpeg-based video thumbnailer | 2 | # Description: FFmpeg-based video thumbnailer |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include ffmpegthumbnailer.local | 6 | include ffmpegthumbnailer.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/ffplay.profile b/etc/ffplay.profile index b42cc29bc..71187a5b5 100644 --- a/etc/ffplay.profile +++ b/etc/ffplay.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for ffplay | 1 | # Firejail profile for ffplay |
2 | # Description: FFmpeg-based media player | 2 | # Description: FFmpeg-based media player |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include ffplay.local | 6 | include ffplay.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/ffprobe.profile b/etc/ffprobe.profile index bd8643206..cb24a7d05 100644 --- a/etc/ffprobe.profile +++ b/etc/ffprobe.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for ffprobe | 1 | # Firejail profile for ffprobe |
2 | # Description: FFmpeg-based media prober | 2 | # Description: FFmpeg-based media prober |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include ffprobe.local | 6 | include ffprobe.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/kiwix-desktop.profile b/etc/kiwix-desktop.profile new file mode 100644 index 000000000..db8f7880c --- /dev/null +++ b/etc/kiwix-desktop.profile | |||
@@ -0,0 +1,49 @@ | |||
1 | # Firejail profile for kiwix-desktop | ||
2 | # Description: view/manage ZIM files | ||
3 | # This file is overwritten after every install/update | ||
4 | # Persistent local customizations | ||
5 | include kiwix-desktop.local | ||
6 | # Persistent global definitions | ||
7 | include globals.local | ||
8 | |||
9 | noblacklist ${HOME}/.local/share/kiwix | ||
10 | noblacklist ${HOME}/.local/share/kiwix-desktop | ||
11 | |||
12 | include disable-common.inc | ||
13 | include disable-devel.inc | ||
14 | include disable-exec.inc | ||
15 | include disable-interpreters.inc | ||
16 | include disable-passwdmgr.inc | ||
17 | include disable-programs.inc | ||
18 | include disable-xdg.inc | ||
19 | |||
20 | mkdir ${HOME}/.local/share/kiwix | ||
21 | mkdir ${HOME}/.local/share/kiwix-desktop | ||
22 | whitelist ${HOME}/.local/share/kiwix | ||
23 | whitelist ${HOME}/.local/share/kiwix-desktop | ||
24 | include whitelist-common.inc | ||
25 | include whitelist-var-common.inc | ||
26 | |||
27 | apparmor | ||
28 | caps.drop all | ||
29 | ipc-namespace | ||
30 | netfilter | ||
31 | # no3d | ||
32 | nodbus | ||
33 | nodvd | ||
34 | nogroups | ||
35 | nonewprivs | ||
36 | noroot | ||
37 | # nosound | ||
38 | notv | ||
39 | nou2f | ||
40 | novideo | ||
41 | protocol unix,inet,inet6,netlink | ||
42 | seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice | ||
43 | shell none | ||
44 | |||
45 | disable-mnt | ||
46 | private-cache | ||
47 | private-dev | ||
48 | private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,hostname,hosts,ld.so.cache,machine-id,pki,pulse,resolv.conf,ssl | ||
49 | private-tmp | ||
diff --git a/etc/lrunzip.profile b/etc/lrunzip.profile index 72abec8bb..c010cbd96 100644 --- a/etc/lrunzip.profile +++ b/etc/lrunzip.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for lrunzip | 1 | # Firejail profile for lrunzip |
2 | # Description: Multi-threaded compression with rzip/lzma, lzo and zpaq | 2 | # Description: Multi-threaded compression with rzip/lzma, lzo and zpaq |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include lrunzip.local | 6 | include lrunzip.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/lrz.profile b/etc/lrz.profile index c1f928bde..8077be945 100644 --- a/etc/lrz.profile +++ b/etc/lrz.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for lrz | 1 | # Firejail profile for lrz |
2 | # Description: Multi-threaded compression with rzip/lzma, lzo and zpaq | 2 | # Description: Multi-threaded compression with rzip/lzma, lzo and zpaq |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include lrz.local | 6 | include lrz.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/lrzcat.profile b/etc/lrzcat.profile index edcd7f8cd..d05ee7aae 100644 --- a/etc/lrzcat.profile +++ b/etc/lrzcat.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for lrzcat | 1 | # Firejail profile for lrzcat |
2 | # Description: Multi-threaded compression with rzip/lzma, lzo and zpaq | 2 | # Description: Multi-threaded compression with rzip/lzma, lzo and zpaq |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include lrzcat.local | 6 | include lrzcat.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/lrzip.profile b/etc/lrzip.profile index a69096e28..3767767f6 100644 --- a/etc/lrzip.profile +++ b/etc/lrzip.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for lrzip | 1 | # Firejail profile for lrzip |
2 | # Description: Multi-threaded compression with rzip/lzma, lzo and zpaq | 2 | # Description: Multi-threaded compression with rzip/lzma, lzo and zpaq |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include lrzip.local | 6 | include lrzip.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/lrztar.profile b/etc/lrztar.profile index 54b04b4ec..673e9f62e 100644 --- a/etc/lrztar.profile +++ b/etc/lrztar.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for lrztar | 1 | # Firejail profile for lrztar |
2 | # Description: Multi-threaded compression with rzip/lzma, lzo and zpaq | 2 | # Description: Multi-threaded compression with rzip/lzma, lzo and zpaq |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include lrztar.local | 6 | include lrztar.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/lrzuntar.profile b/etc/lrzuntar.profile index f21169b24..245d1c669 100644 --- a/etc/lrzuntar.profile +++ b/etc/lrzuntar.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for lrzuntar | 1 | # Firejail profile for lrzuntar |
2 | # Description: Multi-threaded compression with rzip/lzma, lzo and zpaq | 2 | # Description: Multi-threaded compression with rzip/lzma, lzo and zpaq |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include lrzuntar.local | 6 | include lrzuntar.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/nano.profile b/etc/nano.profile index 30a6e03e7..9965d8a6b 100644 --- a/etc/nano.profile +++ b/etc/nano.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for nano | 1 | # Firejail profile for nano |
2 | # Description: nano is an easy text editor for the terminal | 2 | # Description: nano is an easy text editor for the terminal |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include nano.local | 6 | include nano.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/p7zip.profile b/etc/p7zip.profile index 644292f2b..7e0069afc 100644 --- a/etc/p7zip.profile +++ b/etc/p7zip.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for p7zip | 1 | # Firejail profile for p7zip |
2 | # Description: 7zr file archiver with high compression ratio | 2 | # Description: 7zr file archiver with high compression ratio |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include p7zip.local | 6 | include p7zip.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/qt-faststart.profile b/etc/qt-faststart.profile index cf459472a..2cdff33a6 100644 --- a/etc/qt-faststart.profile +++ b/etc/qt-faststart.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for qt-faststart | 1 | # Firejail profile for qt-faststart |
2 | # Description: FFmpeg-based media utility | 2 | # Description: FFmpeg-based media utility |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include qt-faststart.local | 6 | include qt-faststart.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/rnano.profile b/etc/rnano.profile index 565c957e0..d9048982a 100644 --- a/etc/rnano.profile +++ b/etc/rnano.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for rnano | 1 | # Firejail profile for rnano |
2 | # Description: A restricted nano | 2 | # Description: A restricted nano |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include rnano.local | 6 | include rnano.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/scp.profile b/etc/scp.profile index ca902061c..287b8029a 100644 --- a/etc/scp.profile +++ b/etc/scp.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for scp | 1 | # Firejail profile for scp |
2 | # Description: Secure shell copy | 2 | # Description: Secure shell copy |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include scp.local | 6 | include scp.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/seahorse-daemon.profile b/etc/seahorse-daemon.profile index 7c0e59c74..6410da4d8 100644 --- a/etc/seahorse-daemon.profile +++ b/etc/seahorse-daemon.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for seahorse-daemon | 1 | # Firejail profile for seahorse-daemon |
2 | # Description: PGP encryption and signing | 2 | # Description: PGP encryption and signing |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include seahorse-daemon.local | 6 | include seahorse-daemon.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/sftp.profile b/etc/sftp.profile index c980e1751..66dc2a57b 100644 --- a/etc/sftp.profile +++ b/etc/sftp.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for sftp | 1 | # Firejail profile for sftp |
2 | # Description: Secure file transport protocol | 2 | # Description: Secure file transport protocol |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include sftp.local | 6 | include sftp.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/tb-starter-wrapper.profile b/etc/tb-starter-wrapper.profile index 8a7d45449..7cf85b387 100644 --- a/etc/tb-starter-wrapper.profile +++ b/etc/tb-starter-wrapper.profile | |||
@@ -13,7 +13,5 @@ noblacklist ${HOME}/.tb | |||
13 | mkdir ${HOME}/.tb | 13 | mkdir ${HOME}/.tb |
14 | whitelist ${HOME}/.tb | 14 | whitelist ${HOME}/.tb |
15 | 15 | ||
16 | x11 xorg | ||
17 | |||
18 | # Redirect | 16 | # Redirect |
19 | include torbrowser-launcher.profile | 17 | include torbrowser-launcher.profile |
diff --git a/etc/torbrowser-launcher.profile b/etc/torbrowser-launcher.profile index 00b82e852..8485c0c4c 100644 --- a/etc/torbrowser-launcher.profile +++ b/etc/torbrowser-launcher.profile | |||
@@ -48,7 +48,7 @@ shell none | |||
48 | #tracelog | 48 | #tracelog |
49 | 49 | ||
50 | disable-mnt | 50 | disable-mnt |
51 | private-bin bash,cat,cp,cut,dirname,env,expr,file,getconf,gpg,grep,gxmessage,id,kdialog,ln,mkdir,mv,pwd,python*,readlink,realpath,rm,sed,sh,tail,tar,tclsh,test,tor-browser,tor-browser-en,torbrowser-launcher,update-desktop-database,xmessage,xz,zenity | 51 | private-bin bash,cat,cp,cut,dirname,env,expr,file,gpg,grep,gxmessage,kdialog,ln,mkdir,mv,python*,rm,sed,sh,tail,tar,tclsh,test,tor-browser,tor-browser-en,torbrowser-launcher,update-desktop-database,xmessage,xz,zenity |
52 | private-dev | 52 | private-dev |
53 | private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,hostname,hosts,ld.so.cache,machine-id,pki,pulse,resolv.conf,ssl | 53 | private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,ld.so.cache,machine-id,pki,pulse,resolv.conf,ssl |
54 | private-tmp | 54 | private-tmp |
diff --git a/etc/transmission-create.profile b/etc/transmission-create.profile index 9b84bc33a..92a4770e2 100644 --- a/etc/transmission-create.profile +++ b/etc/transmission-create.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for transmission-create | 1 | # Firejail profile for transmission-create |
2 | # Description: CLI utility to create BitTorrent .torrent files | 2 | # Description: CLI utility to create BitTorrent .torrent files |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include transmission-create.local | 6 | include transmission-create.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/transmission-edit.profile b/etc/transmission-edit.profile index 07990aa15..6d8a98911 100644 --- a/etc/transmission-edit.profile +++ b/etc/transmission-edit.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for transmission-edit | 1 | # Firejail profile for transmission-edit |
2 | # Description: CLI utility to modify BitTorrent .torrent files' announce URLs | 2 | # Description: CLI utility to modify BitTorrent .torrent files' announce URLs |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include transmission-edit.local | 6 | include transmission-edit.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/transmission-remote-cli.profile b/etc/transmission-remote-cli.profile index 98b875fc5..2e7a31545 100644 --- a/etc/transmission-remote-cli.profile +++ b/etc/transmission-remote-cli.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for transmission-remote-cli | 1 | # Firejail profile for transmission-remote-cli |
2 | # Description: A remote control utility for transmission-daemon (CLI) | 2 | # Description: A remote control utility for transmission-daemon (CLI) |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include transmission-remote-cli.local | 6 | include transmission-remote-cli.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/transmission-remote-gtk.profile b/etc/transmission-remote-gtk.profile index b7173def5..5a57e4887 100644 --- a/etc/transmission-remote-gtk.profile +++ b/etc/transmission-remote-gtk.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for transmission-remote-gtk | 1 | # Firejail profile for transmission-remote-gtk |
2 | # Description: A remote control utility for transmission-daemon (GTK GUI) | 2 | # Description: A remote control utility for transmission-daemon (GTK GUI) |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include transmission-remote-gtk.local | 6 | include transmission-remote-gtk.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/whois.profile b/etc/whois.profile index f101ee637..859542533 100644 --- a/etc/whois.profile +++ b/etc/whois.profile | |||
@@ -1,7 +1,7 @@ | |||
1 | # Firejail profile for whois | 1 | # Firejail profile for whois |
2 | # Description: Intelligent WHOIS client | 2 | # Description: Intelligent WHOIS client |
3 | quiet | ||
4 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
5 | # Persistent local customizations | 5 | # Persistent local customizations |
6 | include whois.local | 6 | include whois.local |
7 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/xpra.profile b/etc/xpra.profile index 6f66b9300..1033a7471 100644 --- a/etc/xpra.profile +++ b/etc/xpra.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for xpra | 1 | # Firejail profile for xpra |
2 | # Description: Tool to detach/reattach running X programs | 2 | # Description: Tool to detach/reattach running X programs |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include xpra.local | 6 | include xpra.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |
diff --git a/etc/zpaq.profile b/etc/zpaq.profile index 6bf3605eb..80329ecfd 100644 --- a/etc/zpaq.profile +++ b/etc/zpaq.profile | |||
@@ -1,6 +1,7 @@ | |||
1 | # Firejail profile for zpaq | 1 | # Firejail profile for zpaq |
2 | # Description: Programmable file compressor, library and utilities. Based on the PAQ compression algorithm. | 2 | # Description: Programmable file compressor, library and utilities. Based on the PAQ compression algorithm. |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | quiet | ||
4 | # Persistent local customizations | 5 | # Persistent local customizations |
5 | include zpaq.local | 6 | include zpaq.local |
6 | # Persistent global definitions | 7 | # Persistent global definitions |