From 54a368fe7d039cacb4d29568e49735a06437d80c Mon Sep 17 00:00:00 2001 From: Fred-Barclay Date: Thu, 14 Apr 2016 00:25:05 +1000 Subject: separated profiles --- etc/icedove.profile | 20 ++++++++++++++++++-- etc/thunderbird.profile | 10 +--------- 2 files changed, 19 insertions(+), 11 deletions(-) diff --git a/etc/icedove.profile b/etc/icedove.profile index 057e0c9ef..2592e59df 100644 --- a/etc/icedove.profile +++ b/etc/icedove.profile @@ -1,3 +1,19 @@ -# Firejail profile for Mozilla Thunderbird (Icedove in Debian) -include /etc/firejail/thunderbird.profile +# Firejail profile for Mozilla Thunderbird (Icedove in Debian Stable) +# Users have thunderbird set to open a browser by clicking a link in an email +# We are not allowed to blacklist browser-specific directories + +noblacklist ~/.gnupg +mkdir ~/.gnupg +whitelist ~/.gnupg + +noblacklist ~/.icedove +mkdir ~/.icedove +whitelist ~/.icedove + +noblacklist ~/.cache/icedove +mkdir ~/.cache +mkdir ~/.cache/icedove +whitelist ~/.cache/icedove + +include /etc/firejail/firefox.profile diff --git a/etc/thunderbird.profile b/etc/thunderbird.profile index 42647b1e5..7882367b9 100644 --- a/etc/thunderbird.profile +++ b/etc/thunderbird.profile @@ -1,4 +1,4 @@ -# Firejail profile for Mozilla Thunderbird (Icedove in Debian) +# Firejail profile for Mozilla Thunderbird # Users have thunderbird set to open a browser by clicking a link in an email # We are not allowed to blacklist browser-specific directories @@ -6,10 +6,6 @@ noblacklist ~/.gnupg mkdir ~/.gnupg whitelist ~/.gnupg -noblacklist ~/.icedove -mkdir ~/.icedove -whitelist ~/.icedove - noblacklist ~/.thunderbird mkdir ~/.thunderbird whitelist ~/.thunderbird @@ -19,9 +15,5 @@ mkdir ~/.cache mkdir ~/.cache/thunderbird whitelist ~/.cache/thunderbird -noblacklist ~/.cache/icedove -mkdir ~/.cache/icedove -whitelist ~/.cache/icedove - include /etc/firejail/firefox.profile -- cgit v1.2.3-54-g00ecf