From 3a11ef510c567f2028060b836b461b918722ed4b Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Sat, 2 Mar 2019 05:11:53 +0000 Subject: Add new profile for transgui (#2502) * Create transgui.profile * Add transgui config to disable-programs.inc * Add transgui to firecfg --- etc/disable-programs.inc | 1 + etc/transgui.profile | 51 ++++++++++++++++++++++++++++++++++++++++++++++ src/firecfg/firecfg.config | 1 + 3 files changed, 53 insertions(+) create mode 100644 etc/transgui.profile diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index de0f7a537..9dbacb02e 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -255,6 +255,7 @@ blacklist ${HOME}/.config/telepathy-account-widgets blacklist ${HOME}/.config/torbrowser blacklist ${HOME}/.config/totem blacklist ${HOME}/.config/tox +blacklist ${HOME}/.config/transgui blacklist ${HOME}/.config/truecraft blacklist ${HOME}/.config/transmission blacklist ${HOME}/.config/uGet diff --git a/etc/transgui.profile b/etc/transgui.profile new file mode 100644 index 000000000..9627b703f --- /dev/null +++ b/etc/transgui.profile @@ -0,0 +1,51 @@ +# Firejail profile for transgui +# Description: Cross-platform Transmission BitTorrent client +# This file is overwritten after every install/update +# Persistent local customizations +include /etc/firejail/transgui.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.config/transgui +whitelist ${HOME}/.config/transgui + +noblacklist ${DOWNLOADS} + +include disable-common.inc +include disable-devel.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +include whitelist-common.inc + +apparmor +caps.drop all +ipc-namespace +machine-id +netfilter +nodbus +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix,inet,inet6 +seccomp +shell none +tracelog + +private-bin geoiplookup,geoiplookup6,transgui +private-cache +private-dev +private-etc alternatives,fonts +private-lib libgdk_pixbuf-2.0.so.*,libGeoIP.so*,libgthread-2.0.so.*,libgtk-x11-2.0.so.*,libX11.so.* +private-tmp + +memory-deny-write-execute +noexec ${HOME} +noexec /tmp diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 9a3823030..0fb6cf247 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -462,6 +462,7 @@ tor-browser-vi tor-browser-zh-cn totem tracker +transgui transmission-cli transmission-gtk transmission-qt -- cgit v1.2.3-54-g00ecf