diff options
Diffstat (limited to 'etc')
-rw-r--r-- | etc/chromium.profile | 7 | ||||
-rw-r--r-- | etc/firefox.profile | 11 | ||||
-rw-r--r-- | etc/spotify.profile | 7 | ||||
-rw-r--r-- | etc/whitelist-common.inc | 13 |
4 files changed, 16 insertions, 22 deletions
diff --git a/etc/chromium.profile b/etc/chromium.profile index 077ec62d0..980e539d5 100644 --- a/etc/chromium.profile +++ b/etc/chromium.profile | |||
@@ -12,10 +12,5 @@ netfilter | |||
12 | whitelist ~/Downloads | 12 | whitelist ~/Downloads |
13 | whitelist ~/Загрузки | 13 | whitelist ~/Загрузки |
14 | whitelist ~/.config/chromium | 14 | whitelist ~/.config/chromium |
15 | include /etc/firejail/whitelist-common.inc | ||
15 | 16 | ||
16 | # common | ||
17 | whitelist ~/.fonts | ||
18 | whitelist ~/.fonts.d | ||
19 | whitelist ~/.fontconfig | ||
20 | whitelist ~/.fonts.conf | ||
21 | whitelist ~/.fonts.conf.d | ||
diff --git a/etc/firefox.profile b/etc/firefox.profile index 954068d47..809363fd6 100644 --- a/etc/firefox.profile +++ b/etc/firefox.profile | |||
@@ -15,17 +15,8 @@ whitelist ~/Загрузки | |||
15 | whitelist ~/dwhelper | 15 | whitelist ~/dwhelper |
16 | whitelist ~/.zotero | 16 | whitelist ~/.zotero |
17 | whitelist ~/.lastpass | 17 | whitelist ~/.lastpass |
18 | whitelist ~/.gtkrc-2.0 | ||
19 | whitelist ~/.config/gtk-3.0 | ||
20 | whitelist ~/.themes/ | ||
21 | whitelist ~/.vimperatorrc | 18 | whitelist ~/.vimperatorrc |
22 | whitelist ~/.vimperator | 19 | whitelist ~/.vimperator |
23 | whitelist ~/.pentadactylrc | 20 | whitelist ~/.pentadactylrc |
24 | whitelist ~/.pentadactyl | 21 | whitelist ~/.pentadactyl |
25 | 22 | include /etc/firejail/whitelist-common.inc \ No newline at end of file | |
26 | # common | ||
27 | whitelist ~/.fonts | ||
28 | whitelist ~/.fonts.d | ||
29 | whitelist ~/.fontconfig | ||
30 | whitelist ~/.fonts.conf | ||
31 | whitelist ~/.fonts.conf.d | ||
diff --git a/etc/spotify.profile b/etc/spotify.profile index f77f900cf..414660857 100644 --- a/etc/spotify.profile +++ b/etc/spotify.profile | |||
@@ -10,6 +10,7 @@ include /etc/firejail/disable-devel.inc | |||
10 | whitelist ${HOME}/.config/spotify | 10 | whitelist ${HOME}/.config/spotify |
11 | whitelist ${HOME}/.local/share/spotify | 11 | whitelist ${HOME}/.local/share/spotify |
12 | whitelist ${HOME}/.cache/spotify | 12 | whitelist ${HOME}/.cache/spotify |
13 | include /etc/firejail/whitelist-common.inc | ||
13 | 14 | ||
14 | caps.drop all | 15 | caps.drop all |
15 | seccomp | 16 | seccomp |
@@ -17,9 +18,3 @@ protocol unix,inet,inet6 | |||
17 | netfilter | 18 | netfilter |
18 | noroot | 19 | noroot |
19 | 20 | ||
20 | # common | ||
21 | whitelist ~/.fonts | ||
22 | whitelist ~/.fonts.d | ||
23 | whitelist ~/.fontconfig | ||
24 | whitelist ~/.fonts.conf | ||
25 | whitelist ~/.fonts.conf.d | ||
diff --git a/etc/whitelist-common.inc b/etc/whitelist-common.inc new file mode 100644 index 000000000..e0c2975df --- /dev/null +++ b/etc/whitelist-common.inc | |||
@@ -0,0 +1,13 @@ | |||
1 | # common whitelist for all profiles | ||
2 | |||
3 | # fonts | ||
4 | whitelist ~/.fonts | ||
5 | whitelist ~/.fonts.d | ||
6 | whitelist ~/.fontconfig | ||
7 | whitelist ~/.fonts.conf | ||
8 | whitelist ~/.fonts.conf.d | ||
9 | |||
10 | # gtk | ||
11 | whitelist ~/.gtkrc-2.0 | ||
12 | whitelist ~/.config/gtk-3.0 | ||
13 | whitelist ~/.themes/ | ||