From c0c4b8cad407d19d3f5610638eff557b74894b46 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Mon, 16 Nov 2015 08:34:52 -0500 Subject: firefox profile fixes --- README | 2 ++ README.md | 9 ++++++++- etc/firefox.profile | 5 ----- etc/whitelist-common.inc | 6 +++++- 4 files changed, 15 insertions(+), 7 deletions(-) diff --git a/README b/README index 961cb0497..eae43e5a0 100644 --- a/README +++ b/README @@ -18,6 +18,8 @@ License: GPL v2 Firejail Authors: netblue30 (netblue30@yahoo.com) +Matt Parnell (https://github.com/ilikenwf) + - whitelisting for core firefox related functionality Andrey Alekseenko (https://github.com/al42and) - fixed Skype profile Ondra Nekola (https://github.com/satai) diff --git a/README.md b/README.md index 578890b1c..692e689a3 100644 --- a/README.md +++ b/README.md @@ -55,14 +55,21 @@ include /etc/firejail/whitelist-common.inc ````` /etc/firejail/whitelist-common.inc ````` +whitelist ~/.config/mimeapps.list (new in 0.9.35) +whitelist ~/.icons (new in 0.9.35) + +# fonts whitelist ~/.fonts (0.9.34) whitelist ~/.fonts.d (0.9.34) whitelist ~/.fontconfig (0.9.34) whitelist ~/.fonts.conf (0.9.34) whitelist ~/.fonts.conf.d (0.9.34) + +# gtk +whitelist ~/.gtkrc (new in 0.9.35) whitelist ~/.gtkrc-2.0 (0.9.34) whitelist ~/.config/gtk-3.0 (new in 0.9.35) -whitelist ~/.themes/ (new in 0.9.35) +whitelist ~/.themes (new in 0.9.35) ````` If you are using a plugin or extension that requires other directories, please open a new issue: https://github.com/netblue30/firejail/issues diff --git a/etc/firefox.profile b/etc/firefox.profile index ffcf6ac59..7b3febbae 100644 --- a/etc/firefox.profile +++ b/etc/firefox.profile @@ -1,6 +1,5 @@ # Firejail profile for Mozilla Firefox (Iceweasel in Debian) noblacklist ${HOME}/.mozilla -noblacklist /usr/lib/firefox include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc include /etc/firejail/disable-common.inc @@ -10,11 +9,7 @@ seccomp protocol unix,inet,inet6,netlink netfilter noroot -whitelist ~/.config/mimeapps.list -whitelist ~/.gtkrc -whitelist ~/.icons whitelist ~/.mozilla -whitelist ~/.themes whitelist ~/Downloads whitelist ~/Загрузки whitelist ~/.cache/mozilla/firefox diff --git a/etc/whitelist-common.inc b/etc/whitelist-common.inc index e0c2975df..f4941a207 100644 --- a/etc/whitelist-common.inc +++ b/etc/whitelist-common.inc @@ -1,5 +1,8 @@ # common whitelist for all profiles +whitelist ~/.config/mimeapps.list +whitelist ~/.icons + # fonts whitelist ~/.fonts whitelist ~/.fonts.d @@ -8,6 +11,7 @@ whitelist ~/.fonts.conf whitelist ~/.fonts.conf.d # gtk +whitelist ~/.gtkrc whitelist ~/.gtkrc-2.0 whitelist ~/.config/gtk-3.0 -whitelist ~/.themes/ +whitelist ~/.themes -- cgit v1.2.3-70-g09d2