From 2d47de38f35d601c78e81c213369c50d5c6cde93 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Tue, 16 Feb 2016 10:50:23 -0500 Subject: merged epiphany browser profile --- Makefile.in | 1 + README | 4 +++- RELNOTES | 2 +- etc/epiphany.profile | 16 ++++++++++++++++ platform/debian/conffiles | 1 + 5 files changed, 22 insertions(+), 2 deletions(-) create mode 100644 etc/epiphany.profile diff --git a/Makefile.in b/Makefile.in index b436a89b2..cf7ec6379 100644 --- a/Makefile.in +++ b/Makefile.in @@ -75,6 +75,7 @@ realinstall: install -m 0755 -d $(DESTDIR)/$(sysconfdir)/firejail install -c -m 0644 .etc/audacious.profile $(DESTDIR)/$(sysconfdir)/firejail/. install -c -m 0644 .etc/clementine.profile $(DESTDIR)/$(sysconfdir)/firejail/. + install -c -m 0644 .etc/epiphany.profile $(DESTDIR)/$(sysconfdir)/firejail/. install -c -m 0644 .etc/gnome-mplayer.profile $(DESTDIR)/$(sysconfdir)/firejail/. install -c -m 0644 .etc/rhythmbox.profile $(DESTDIR)/$(sysconfdir)/firejail/. install -c -m 0644 .etc/totem.profile $(DESTDIR)/$(sysconfdir)/firejail/. diff --git a/README b/README index ed5721de4..799921cfe 100644 --- a/README +++ b/README @@ -18,8 +18,10 @@ License: GPL v2 Firejail Authors: netblue30 (netblue30@yahoo.com) +jrabe (https://github.com/jrabe) + - Epiphany profile jgriffiths (https://github.com/jgriffiths) - - make rpm packages support: "make rpms" + - make rpm packages support Tom Mellor (https://github.com/kalegrill) - mupen64plus profile Martin Carpenter (https://github.com/mcarpenter) diff --git a/RELNOTES b/RELNOTES index daa92d5dc..9e1f124fb 100644 --- a/RELNOTES +++ b/RELNOTES @@ -5,7 +5,7 @@ firejail (0.9.39) baseline; urgency=low * added --nice option * --version also prints compile options * build rpm packages using "make rpms" - * new profiles: lxterminal + * new profiles: lxterminal, Epiphany * bugfixes -- netblue30 Tue, 8 Feb 2016 10:00:00 -0500 diff --git a/etc/epiphany.profile b/etc/epiphany.profile new file mode 100644 index 000000000..e86a35258 --- /dev/null +++ b/etc/epiphany.profile @@ -0,0 +1,16 @@ +# Epiphany browser profile +include /etc/firejail/disable-mgmt.inc +include /etc/firejail/disable-secret.inc +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-terminals.inc +whitelist ${DOWNLOADS} +whitelist ${HOME}/.local/share/epiphany +whitelist ${HOME}/.config/epiphany +whitelist ${HOME}/.cache/epiphany +include /etc/firejail/whitelist-common.inc +caps.drop all +seccomp +protocol unix,inet,inet6 +netfilter + diff --git a/platform/debian/conffiles b/platform/debian/conffiles index 27e65c5e6..a2c3727ce 100644 --- a/platform/debian/conffiles +++ b/platform/debian/conffiles @@ -21,6 +21,7 @@ /etc/firejail/vlc.profile /etc/firejail/audacious.profile /etc/firejail/clementine.profile +/etc/firejail/epiphany.profile /etc/firejail/gnome-mplayer.profile /etc/firejail/rhythmbox.profile /etc/firejail/totem.profile -- cgit v1.2.3-70-g09d2