From 672cc747039c240d9af53cd3719dec458129ecc0 Mon Sep 17 00:00:00 2001 From: Tad Date: Sun, 14 Jan 2018 12:37:17 -0500 Subject: Add a profile for OnionShare --- etc/disable-programs.inc | 1 + etc/onionshare-gui.profile | 35 +++++++++++++++++++++++++++++++++++ src/firecfg/firecfg.config | 1 + 3 files changed, 37 insertions(+) create mode 100644 etc/onionshare-gui.profile diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index e6d425df2..667c209ed 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -155,6 +155,7 @@ blacklist ${HOME}/.config/netsurf blacklist ${HOME}/.config/nheko blacklist ${HOME}/.config/okularpartrc blacklist ${HOME}/.config/okularrc +blacklist ${HOME}/.config/onionshare blacklist ${HOME}/.config/opera blacklist ${HOME}/.config/opera-beta blacklist ${HOME}/.config/orage diff --git a/etc/onionshare-gui.profile b/etc/onionshare-gui.profile new file mode 100644 index 000000000..7220f7e1c --- /dev/null +++ b/etc/onionshare-gui.profile @@ -0,0 +1,35 @@ +# Firejail profile for onionshare-gui +# This file is overwritten after every install/update +# Persistent local customizations +include /etc/firejail/onionshare-gui.local +# Persistent global definitions +include /etc/firejail/globals.local + +noblacklist ${HOME}/.config/onionshare + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc +include /etc/firejail/disable-programs.inc + +caps.drop all +ipc-namespace +netfilter +no3d +nodvd +nogroups +nonewprivs +noroot +nosound +notv +novideo +protocol unix,inet,inet6 +seccomp +shell none + +private-dev +private-tmp + +memory-deny-write-execute +noexec ${HOME} +noexec /tmp diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 6f6dd3f06..150b02c9e 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -250,6 +250,7 @@ nylas obs odt2txt okular +onionshare-gui open-invaders openshot openshot-qt -- cgit v1.2.3-70-g09d2 From f731029fbb7e96314d5a594afc1c0b8b847c8cb9 Mon Sep 17 00:00:00 2001 From: Tad Date: Sun, 14 Jan 2018 22:49:37 -0500 Subject: Update firecfg.config and add a profile alias for idea.sh --- etc/ideaIC.profile | 10 ++++++++++ src/firecfg/firecfg.config | 23 +++++++++++++++++++++++ 2 files changed, 33 insertions(+) create mode 100644 etc/ideaIC.profile diff --git a/etc/ideaIC.profile b/etc/ideaIC.profile new file mode 100644 index 000000000..f7a69fa94 --- /dev/null +++ b/etc/ideaIC.profile @@ -0,0 +1,10 @@ +# Firejail profile for ideaIC +# This file is overwritten after every install/update +# Persistent local customizations +include /etc/firejail/ideaIC.local +# Persistent global definitions +include /etc/firejail/globals.local + + +# Redirect +include /etc/firejail/idea.sh.profile diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 150b02c9e..3dbd8df1a 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -21,6 +21,7 @@ amule android-studio apktool arch-audit +archaudit-report ardour4 ardour5 arduino @@ -42,6 +43,7 @@ bleachbit blender bless bluefish +bnox brackets brasero brave @@ -94,6 +96,7 @@ dropbox ebook-viewer elinks empathy +enpass eog eom epiphany @@ -170,6 +173,7 @@ icecat icedove iceweasel idea.sh +ideaIC imagej img2txt inkscape @@ -271,6 +275,7 @@ pinta pithos pitivi pix +playonlinux pluma polari psi-plus @@ -307,6 +312,7 @@ skype skypeforlinux slack smplayer +smtube soffice soundconverter spotify @@ -318,13 +324,30 @@ steam stellarium strings supertux2 +surf +sylpheed synfigstudio teamspeak3 telegram telegram-desktop terasology thunderbird +tor-browser-ar tor-browser-en +tor-browser-en-us +tor-browser-es-es +tor-browser-es +tor-browser-fa +tor-browser-fr +tor-browser-it +tor-browser-ja +tor-browser-ko +torbrowser-launcher +tor-browser-pl +tor-browser-pt-br +tor-browser-ru +tor-browser-vi +tor-browser-zh-cn totem tracker transmission-cli -- cgit v1.2.3-70-g09d2 From 908736fce96da4c35697bb49d7039c1ee804668a Mon Sep 17 00:00:00 2001 From: Tad Date: Sun, 14 Jan 2018 23:39:55 -0500 Subject: Fix #1724, Tor browser not working on Ubuntu and Fedora --- etc/torbrowser-launcher.profile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/torbrowser-launcher.profile b/etc/torbrowser-launcher.profile index 51a5d7735..49b083919 100644 --- a/etc/torbrowser-launcher.profile +++ b/etc/torbrowser-launcher.profile @@ -33,7 +33,7 @@ tracelog disable-mnt private-bin bash,cp,dirname,env,expr,file,getconf,gpg,grep,id,ln,mkdir,python*,readlink,rm,sed,sh,tail,test,tor-browser-en,torbrowser-launcher private-dev -private-etc fonts +private-etc fonts,hostname,hosts,resolv.conf,pki,ssl,ca-certificates private-tmp noexec /tmp -- cgit v1.2.3-70-g09d2