From dae6b28f257500baed8c3172749293f024c15f8c Mon Sep 17 00:00:00 2001 From: netblue30 Date: Fri, 1 Apr 2016 07:44:07 -0400 Subject: whitelisted Thunderbird profile --- etc/thunderbird.profile | 32 +++++++++++++++++++------------- 1 file changed, 19 insertions(+), 13 deletions(-) (limited to 'etc/thunderbird.profile') diff --git a/etc/thunderbird.profile b/etc/thunderbird.profile index 7913c07ac..42647b1e5 100644 --- a/etc/thunderbird.profile +++ b/etc/thunderbird.profile @@ -2,20 +2,26 @@ # Users have thunderbird set to open a browser by clicking a link in an email # We are not allowed to blacklist browser-specific directories -noblacklist ${HOME}/.gnupg +noblacklist ~/.gnupg +mkdir ~/.gnupg +whitelist ~/.gnupg + noblacklist ~/.icedove +mkdir ~/.icedove +whitelist ~/.icedove + noblacklist ~/.thunderbird -noblacklist ~/.mozilla -noblacklist ~/.cache/mozilla -noblacklist ~/keepassx.kdbx -include /etc/firejail/disable-common.inc -include /etc/firejail/disable-programs.inc -include /etc/firejail/disable-devel.inc +mkdir ~/.thunderbird +whitelist ~/.thunderbird + +noblacklist ~/.cache/thunderbird +mkdir ~/.cache +mkdir ~/.cache/thunderbird +whitelist ~/.cache/thunderbird + +noblacklist ~/.cache/icedove +mkdir ~/.cache/icedove +whitelist ~/.cache/icedove -caps.drop all -seccomp -protocol unix,inet,inet6 -netfilter -tracelog -noroot +include /etc/firejail/firefox.profile -- cgit v1.2.3-54-g00ecf