From fb85de2ae5227751324de3e9d497f455a71023ef Mon Sep 17 00:00:00 2001 From: Fred Barclay Date: Sat, 15 Apr 2017 11:45:13 -0500 Subject: update after dino profile merge --- README | 1 + README.md | 2 +- RELNOTES | 2 +- etc/dino.profile | 19 ++++++++----------- etc/disable-programs.inc | 1 + platform/debian/conffiles | 1 + src/firecfg/firecfg.config | 1 + 7 files changed, 14 insertions(+), 13 deletions(-) diff --git a/README b/README index 84f600ba1..1b1cda252 100644 --- a/README +++ b/README @@ -354,6 +354,7 @@ SpotComms (https://github.com/SpotComms) - added Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5 profiles - added PDFSam, Pithos, and Xonotic profiles - disabled Go, Rust, and OpenSSL in disable-devel.conf + - added dino profile SYN-cook (https://github.com/SYN-cook) - keepass/keepassx browser fixes - disable-common.inc fixes diff --git a/README.md b/README.md index 2dcdcc0cb..7fcf0e540 100644 --- a/README.md +++ b/README.md @@ -196,4 +196,4 @@ simple-scan, skanlite, ssh-agent, tracker, transmission-cli, transmission-show, xed, pluma, Cryptocat, Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5, PDFSam, Pithos, Xonotic, wireshark, keepassx2, QupZilla, FossaMail, Uzbl browser, xmms, iridium browser, Kino, Thunar, Geeqie, Engrampa, Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView, baloo_file, -Nylas +Nylas,dino diff --git a/RELNOTES b/RELNOTES index a3571b630..8736a8e34 100644 --- a/RELNOTES +++ b/RELNOTES @@ -36,7 +36,7 @@ firejail (0.9.46-rc1) baseline; urgency=low * new profiles: Xonotic, wireshark, keepassx2, QupZilla, FossaMail, * new profiles: Uzbl browser, iridium browser, Thunar, Geeqie, Engrampa, * new profiles: Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView, - * new profiles: baloo_file, Nylas + * new profiles: baloo_file, Nylas,dino * bugfixes -- netblue30 Fri, 7 Apr 2017 08:00:00 -0500 diff --git a/etc/dino.profile b/etc/dino.profile index 7634eae91..a71ab27d7 100644 --- a/etc/dino.profile +++ b/etc/dino.profile @@ -5,22 +5,23 @@ include /etc/firejail/dino.local # Firejail profile for Dino noblacklist ${HOME}/.local/share/dino -mkdir ${HOME}/.local/share/dino -mkdir ${HOME}/Downloads - -whitelist ${HOME}/.local/share/dino -whitelist ${HOME}/Downloads - include /etc/firejail/disable-common.inc +include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc include /etc/firejail/disable-programs.inc -include /etc/firejail/disable-devel.inc + +whitelist ${HOME}/Downloads +mkdir ${HOME}/.local/share/dino +whitelist ${HOME}/.local/share/dino caps.drop all +machine-id netfilter +no3d nogroups nonewprivs noroot +nosound protocol unix,inet,inet6 seccomp shell none @@ -29,7 +30,3 @@ private-bin dino #private-etc fonts #breaks server connection private-dev private-tmp -machine-id - -no3d -nosound diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index c8777ea08..87f8e13b9 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -215,6 +215,7 @@ blacklist ${HOME}/.local/share/aspyr-media blacklist ${HOME}/.local/share/baloo blacklist ${HOME}/.local/share/cdprojektred blacklist ${HOME}/.local/share/data/Mumble +blacklist ${HOME}./local/share/dino blacklist ${HOME}/.local/share/dolphin blacklist ${HOME}/.local/share/epiphany blacklist ${HOME}/.local/share/evolution diff --git a/platform/debian/conffiles b/platform/debian/conffiles index 84557cd1f..4e6904b6a 100644 --- a/platform/debian/conffiles +++ b/platform/debian/conffiles @@ -36,6 +36,7 @@ /etc/firejail/default.profile /etc/firejail/deluge.profile /etc/firejail/dillo.profile +/etc/firejail/dino.profile /etc/firejail/disable-common.inc /etc/firejail/disable-devel.inc /etc/firejail/disable-passwdmgr.inc diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 826de6260..7fb64144a 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -63,6 +63,7 @@ w3m bitlbee corebird # Cryptocat is added but commented since isn't installed to a */bin... keep an eye on this +dino empathy gitter hexchat -- cgit v1.2.3-54-g00ecf