From eeef0a23367ddfb00b651ec6a8aa55e85d63aa92 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Thu, 25 May 2017 10:33:07 -0400 Subject: whitelisted transmission, deluge and qbittorrent profiles; please use ~/Downloads to save your files --- etc/deluge.profile | 9 ++++++++- etc/disable-programs.inc | 3 +++ etc/qbittorrent.profile | 13 +++++++++++++ etc/transmission-gtk.profile | 7 +++++++ etc/transmission-qt.profile | 7 +++++++ etc/whitelist-common.inc | 2 ++ 6 files changed, 40 insertions(+), 1 deletion(-) diff --git a/etc/deluge.profile b/etc/deluge.profile index 71cf9442f..db2d339c7 100644 --- a/etc/deluge.profile +++ b/etc/deluge.profile @@ -5,13 +5,20 @@ include /etc/firejail/globals.local # Persistent customizations should go in a .local file. include /etc/firejail/deluge.local -# deluge bittorrernt client profile +# deluge bittorrent client profile +noblacklist ${HOME}/.config/deluge + include /etc/firejail/disable-common.inc include /etc/firejail/disable-programs.inc # deluge is using python on Debian #include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc +mkdir ${HOME}/.config/deluge +whitelist ${HOME}/.config/deluge +whitelist ${DOWNLOADS} +include /etc/firejail/whitelist-common.inc + caps.drop all netfilter nonewprivs diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index df7d8714e..12f6d6d6d 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -69,6 +69,7 @@ blacklist ${HOME}/.config/clipit blacklist ${HOME}/.config/cmus blacklist ${HOME}/.config/darktable blacklist ${HOME}/.config/deadbeef +blacklist ${HOME}/.config/deluge blacklist ${HOME}/.config/dolphinrc blacklist ${HOME}/.config/dragonplayerrc blacklist ${HOME}/.config/enchant @@ -124,6 +125,7 @@ blacklist ${HOME}/.config/pix blacklist ${HOME}/.config/pluma blacklist ${HOME}/.config/psi+ blacklist ${HOME}/.config/ristretto +blacklist ${HOME}/.config/qBittorrent blacklist ${HOME}/.config/qpdfview blacklist ${HOME}/.config/qt5ct blacklist ${HOME}/.config/qupzilla @@ -369,6 +371,7 @@ blacklist ${HOME}/.cache/netsurf blacklist ${HOME}/.cache/opera blacklist ${HOME}/.cache/opera-beta blacklist ${HOME}/.cache/org.gnome.Books +blacklist ${HOME}/.cache/qBittorrent blacklist ${HOME}/.cache/qutebrowser blacklist ${HOME}/.cache/simple-scan blacklist ${HOME}/.cache/slimjet diff --git a/etc/qbittorrent.profile b/etc/qbittorrent.profile index 72c6b9491..b696c207f 100644 --- a/etc/qbittorrent.profile +++ b/etc/qbittorrent.profile @@ -7,11 +7,24 @@ include /etc/firejail/qbittorrent.local # qbittorrent bittorrent profile noblacklist ~/.config/qt5ct +noblacklist ~/.config/qBittorrent +noblacklist ~/.cache/qBittorrent + include /etc/firejail/disable-common.inc include /etc/firejail/disable-programs.inc include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc +mkdir ~/.local/share/data/qBittorrent +whitelist ~/.local/share/data/qBittorrent +whitelist ~/.config/qt5ct +mkdir ~/.config/qBittorrent +whitelist ~/.config/qBittorrent +mkdir ~/.cache/qBittorrent +whitelist ~/.cache/qBittorrent +whitelist ${DOWNLOADS} +include /etc/firejail/whitelist-common.inc + caps.drop all machine-id netfilter diff --git a/etc/transmission-gtk.profile b/etc/transmission-gtk.profile index 5834b7602..84d01179c 100644 --- a/etc/transmission-gtk.profile +++ b/etc/transmission-gtk.profile @@ -14,6 +14,13 @@ include /etc/firejail/disable-programs.inc include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc +mkdir ~/.config/transmission +whitelist ~/.config/transmission +mkdir ~/.cache/transmission +whitelist ~/.cache/transmission +whitelist ${DOWNLOADS} +include /etc/firejail/whitelist-common.inc + caps.drop all netfilter nonewprivs diff --git a/etc/transmission-qt.profile b/etc/transmission-qt.profile index f933c9e62..70a5af575 100644 --- a/etc/transmission-qt.profile +++ b/etc/transmission-qt.profile @@ -14,6 +14,13 @@ include /etc/firejail/disable-programs.inc include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc +mkdir ~/.config/transmission +whitelist ~/.config/transmission +mkdir ~/.cache/transmission +whitelist ~/.cache/transmission +whitelist ${DOWNLOADS} +include /etc/firejail/whitelist-common.inc + caps.drop all netfilter nonewprivs diff --git a/etc/whitelist-common.inc b/etc/whitelist-common.inc index ab05ad24a..d5d1c19ec 100644 --- a/etc/whitelist-common.inc +++ b/etc/whitelist-common.inc @@ -30,6 +30,8 @@ whitelist ~/.config/gtk-3.0 whitelist ~/.themes whitelist ~/.kde/share/config/gtkrc whitelist ~/.kde/share/config/gtkrc-2.0 +whitelist ~/.gnome2 +whitelist ~/.gnome2-private # dconf mkdir ~/.config/dconf -- cgit v1.2.3-70-g09d2