From 26a2cd7e9424206e479b5105711a90c5c5f58837 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Fri, 16 Dec 2016 13:07:29 -0500 Subject: profile updates --- etc/qupzilla.profile | 22 ++++++++++++++++++++++ etc/qupzilla.txt | 22 ---------------------- 2 files changed, 22 insertions(+), 22 deletions(-) create mode 100644 etc/qupzilla.profile delete mode 100644 etc/qupzilla.txt diff --git a/etc/qupzilla.profile b/etc/qupzilla.profile new file mode 100644 index 000000000..387ddeffa --- /dev/null +++ b/etc/qupzilla.profile @@ -0,0 +1,22 @@ +# Firejail profile for Qupzilla web browser +noblacklist ${HOME}/.config/qupzilla +noblacklist ${HOME}/.cache/qupzilla +include /etc/firejail/disable-mgmt.inc +include /etc/firejail/disable-secret.inc +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-devel.inc +caps.drop all +seccomp +protocol unix,inet,inet6,netlink +netfilter +tracelog +noroot +whitelist ${DOWNLOADS} +whitelist ~/.config/qupzilla +whitelist ~/.cache/qupzilla +include /etc/firejail/whitelist-common.inc + +# experimental features +#private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse + + diff --git a/etc/qupzilla.txt b/etc/qupzilla.txt deleted file mode 100644 index 387ddeffa..000000000 --- a/etc/qupzilla.txt +++ /dev/null @@ -1,22 +0,0 @@ -# Firejail profile for Qupzilla web browser -noblacklist ${HOME}/.config/qupzilla -noblacklist ${HOME}/.cache/qupzilla -include /etc/firejail/disable-mgmt.inc -include /etc/firejail/disable-secret.inc -include /etc/firejail/disable-common.inc -include /etc/firejail/disable-devel.inc -caps.drop all -seccomp -protocol unix,inet,inet6,netlink -netfilter -tracelog -noroot -whitelist ${DOWNLOADS} -whitelist ~/.config/qupzilla -whitelist ~/.cache/qupzilla -include /etc/firejail/whitelist-common.inc - -# experimental features -#private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse - - -- cgit v1.2.3-70-g09d2