From dae8e69915b7c8ae1e3c291e504623750707e0f7 Mon Sep 17 00:00:00 2001 From: Fidel Ramos Date: Tue, 30 Jan 2024 23:36:43 +0000 Subject: electron-cash.profile --- etc/profile-a-l/electron-cash.profile | 54 +++++++++++++++++++++++++++++++++++ 1 file changed, 54 insertions(+) create mode 100644 etc/profile-a-l/electron-cash.profile (limited to 'etc') diff --git a/etc/profile-a-l/electron-cash.profile b/etc/profile-a-l/electron-cash.profile new file mode 100644 index 000000000..bedccf667 --- /dev/null +++ b/etc/profile-a-l/electron-cash.profile @@ -0,0 +1,54 @@ +# Firejail profile for electron-cash +# Description: Lightweight Bitcoin Cash wallet +# This file is overwritten after every install/update +# Persistent local customizations +include electron-cash.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.electron-cash + +# Allow python (blacklisted by disable-interpreters.inc) +include allow-python3.inc + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.electron-cash +whitelist ${HOME}/.electron-cash +include whitelist-common.inc +include whitelist-var-common.inc + +caps.drop all +ipc-namespace +netfilter +no3d +nodvd +nogroups +noinput +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix,inet,inet6 +seccomp + +disable-mnt +private-bin electron-cash,python* +private-cache +?HAS_APPIMAGE: ignore private-dev +private-dev +private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,ld.so.cache,ld.so.preload,machine-id,pki,resolv.conf,ssl +private-tmp + +# dbus-user none +# dbus-system none + +restrict-namespaces -- cgit v1.2.3-70-g09d2 From f0cfc70cc381927e659118f3170068139f219ec8 Mon Sep 17 00:00:00 2001 From: Fidel Ramos Date: Wed, 31 Jan 2024 11:11:53 +0000 Subject: Blacklist ~/.electron-cash in disable-programs.inc --- etc/inc/disable-programs.inc | 1 + 1 file changed, 1 insertion(+) (limited to 'etc') diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index 50e4854ac..eb4d21675 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -712,6 +712,7 @@ blacklist ${HOME}/.dosbox blacklist ${HOME}/.dropbox* blacklist ${HOME}/.easystroke blacklist ${HOME}/.electron-cache +blacklist ${HOME}/.electron-cash blacklist ${HOME}/.electrum* blacklist ${HOME}/.elinks blacklist ${HOME}/.emacs -- cgit v1.2.3-70-g09d2