diff options
Diffstat (limited to 'etc')
-rw-r--r-- | etc/deluge.profile | 5 | ||||
-rw-r--r-- | etc/disable-devel.inc | 3 | ||||
-rw-r--r-- | etc/mpv.profile | 4 | ||||
-rw-r--r-- | etc/qbittorrent.profile | 3 | ||||
-rw-r--r-- | etc/rtorrent.profile | 3 | ||||
-rw-r--r-- | etc/transmission-gtk.profile | 5 | ||||
-rw-r--r-- | etc/transmission-qt.profile | 5 | ||||
-rw-r--r-- | etc/vlc.profile | 5 |
8 files changed, 28 insertions, 5 deletions
diff --git a/etc/deluge.profile b/etc/deluge.profile index 277ecc15e..87a17423b 100644 --- a/etc/deluge.profile +++ b/etc/deluge.profile | |||
@@ -1,4 +1,4 @@ | |||
1 | # deluge bittorernt client profile | 1 | # deluge bittorrernt client profile |
2 | include /etc/firejail/disable-common.inc | 2 | include /etc/firejail/disable-common.inc |
3 | include /etc/firejail/disable-programs.inc | 3 | include /etc/firejail/disable-programs.inc |
4 | # deluge is using python on Debian | 4 | # deluge is using python on Debian |
@@ -12,3 +12,6 @@ noroot | |||
12 | nosound | 12 | nosound |
13 | protocol unix,inet,inet6 | 13 | protocol unix,inet,inet6 |
14 | seccomp | 14 | seccomp |
15 | |||
16 | shell none | ||
17 | private-bin deluge,sh,python,uname | ||
diff --git a/etc/disable-devel.inc b/etc/disable-devel.inc index 0c9d21d39..99f059c44 100644 --- a/etc/disable-devel.inc +++ b/etc/disable-devel.inc | |||
@@ -37,8 +37,7 @@ blacklist /usr/lib/php* | |||
37 | blacklist /usr/bin/ruby | 37 | blacklist /usr/bin/ruby |
38 | blacklist /usr/lib/ruby | 38 | blacklist /usr/lib/ruby |
39 | 39 | ||
40 | # disabled temporarily pending globbing implementation | 40 | # Programs using python: deluge, some firefox addons |
41 | # in noblacklist command and firefox profile fix | ||
42 | # Python 2 | 41 | # Python 2 |
43 | #blacklist /usr/bin/python2* | 42 | #blacklist /usr/bin/python2* |
44 | #blacklist /usr/lib/python2* | 43 | #blacklist /usr/lib/python2* |
diff --git a/etc/mpv.profile b/etc/mpv.profile index 0a8a6103f..cbed7e8c6 100644 --- a/etc/mpv.profile +++ b/etc/mpv.profile | |||
@@ -12,3 +12,7 @@ nonewprivs | |||
12 | noroot | 12 | noroot |
13 | protocol unix,inet,inet6 | 13 | protocol unix,inet,inet6 |
14 | seccomp | 14 | seccomp |
15 | |||
16 | # to test | ||
17 | shell none | ||
18 | private-bin mpv | ||
diff --git a/etc/qbittorrent.profile b/etc/qbittorrent.profile index cbf898502..bb97a880b 100644 --- a/etc/qbittorrent.profile +++ b/etc/qbittorrent.profile | |||
@@ -11,3 +11,6 @@ noroot | |||
11 | nosound | 11 | nosound |
12 | protocol unix,inet,inet6 | 12 | protocol unix,inet,inet6 |
13 | seccomp | 13 | seccomp |
14 | |||
15 | shell none | ||
16 | private-bin qbittorrent | ||
diff --git a/etc/rtorrent.profile b/etc/rtorrent.profile index 0be5e15d1..c196370a2 100644 --- a/etc/rtorrent.profile +++ b/etc/rtorrent.profile | |||
@@ -11,3 +11,6 @@ noroot | |||
11 | nosound | 11 | nosound |
12 | protocol unix,inet,inet6 | 12 | protocol unix,inet,inet6 |
13 | seccomp | 13 | seccomp |
14 | |||
15 | shell none | ||
16 | private-bin rtorrent | ||
diff --git a/etc/transmission-gtk.profile b/etc/transmission-gtk.profile index 5aef32d45..e8d0e25e7 100644 --- a/etc/transmission-gtk.profile +++ b/etc/transmission-gtk.profile | |||
@@ -1,4 +1,4 @@ | |||
1 | # transmission-gtk profile | 1 | # transmission-gtk bittorrent profile |
2 | noblacklist ${HOME}/.config/transmission | 2 | noblacklist ${HOME}/.config/transmission |
3 | noblacklist ${HOME}/.cache/transmission | 3 | noblacklist ${HOME}/.cache/transmission |
4 | 4 | ||
@@ -15,3 +15,6 @@ nosound | |||
15 | protocol unix,inet,inet6 | 15 | protocol unix,inet,inet6 |
16 | seccomp | 16 | seccomp |
17 | tracelog | 17 | tracelog |
18 | |||
19 | shell none | ||
20 | private-bin transmission-gtk | ||
diff --git a/etc/transmission-qt.profile b/etc/transmission-qt.profile index d8ab1c60d..fd3a98aad 100644 --- a/etc/transmission-qt.profile +++ b/etc/transmission-qt.profile | |||
@@ -1,4 +1,4 @@ | |||
1 | # transmission-qt profile | 1 | # transmission-qt bittorrent profile |
2 | noblacklist ${HOME}/.config/transmission | 2 | noblacklist ${HOME}/.config/transmission |
3 | noblacklist ${HOME}/.cache/transmission | 3 | noblacklist ${HOME}/.cache/transmission |
4 | 4 | ||
@@ -15,3 +15,6 @@ nosound | |||
15 | protocol unix,inet,inet6 | 15 | protocol unix,inet,inet6 |
16 | seccomp | 16 | seccomp |
17 | tracelog | 17 | tracelog |
18 | |||
19 | shell none | ||
20 | private-bin transmission-qt | ||
diff --git a/etc/vlc.profile b/etc/vlc.profile index f8eebd376..e225e80e9 100644 --- a/etc/vlc.profile +++ b/etc/vlc.profile | |||
@@ -12,3 +12,8 @@ nonewprivs | |||
12 | noroot | 12 | noroot |
13 | protocol unix,inet,inet6 | 13 | protocol unix,inet,inet6 |
14 | seccomp | 14 | seccomp |
15 | |||
16 | |||
17 | # to test | ||
18 | shell none | ||
19 | private-bin vlc | ||