github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 22:01:33 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

Update wording in templates (#2815)

Browse source 
* Change wording in redirect_alias-profile.template

* Change wording in profile.template

* Update wording in redirect_alias-profile.template
This commit is contained in:
glitsj16 2019-06-30 20:51:17 +00:00 • committed by GitHub
parent a28134e0b1
commit 1dea9cfc5d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 22 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

18
etc/templates/profile.template
View file

@ -3,16 +3,16 @@
# This file is overwritten after every install/update
# --- CUT HERE ---
# This is a generic template to help you with creation of profiles
# for new programs. PRs welcome at https://github.com/netblue30/firejail/
# for new programs. PRs welcome at https://github.com/netblue30/firejail/.
#
# Rules to follow:
# - lines with one # are often used in profiles
# - lines with two ## are only needed in special situations
# - make the profile as restrictive as possible while still keeping the program useful
# (e. g. a program that is unable to save user's work is considered a bad practice)
# - dedicate some time (based on how complex the application is) to profile testing before raising
# (e. g. a program that is unable to save user's work is considered bad practice)
# - dedicate some time (based on the complexity of the application) to profile testing before raising
# a pull request
# - keep the sections structure, use a single empty line as a separator
# - keep the sections structure, use a single empty line as separator
# - entries within sections are alphabetically sorted
# - consider putting binary into src/firecfg/firecfg.config (keep list sorted) but beware
# to not do this for essential utilities as this may *break* your OS! (related discussion:
@ -66,8 +66,8 @@ include globals.local
# One way to retrieve the files a program uses is:
# - launch binary with --private naming a sandbox
# `firejail --name=test --ignore=private-bin [--profile=PROFILE] --private BINARY`
# - work with the program, do some configuration changes and save them, open new documents,
# install plugins if they exists, etc
# - work with the program, make some configuration changes and save them, open new documents,
# install plugins if they exists, etc.
# - join the sandbox with bash:
# `firejail --join=test bash`
# - look what has changed and use that information to populate blacklist and whitelist sections
@ -128,14 +128,14 @@ include globals.local
#notv
#nou2f
#novideo
# Remove every not needed protocol
# Remove each unneeded protocol:
# - unix is usually needed
# - inet,inet6 only if internet access is requiered (see 'net none'/'netfilter' above)
# - inet,inet6 only if internet access is required (see 'net none'/'netfilter' above)
# - netlink is rarely needed
# - packet almost never
#protocol unix,inet,inet6,netlink,packet
#seccomp
##seccomp.drop SYSCALLS (see also syscalls.txt)
##seccomp.drop SYSCALLS (see syscalls.txt)
#shell none
#tracelog
# Prefer 'x11 none' instead of 'blacklist /tmp/.X11-unix' if 'net none' is set

25
etc/templates/redirect_alias-profile.template
View file

@ -6,38 +6,39 @@ include PROFILE.local
# Persistent global definitions
# added by included profile
#include globals.local
#NOTE: let include globals.local commented, except redirecting to a -common.profile
#NOTE: keep include globals.local commented, except when redirecting to a *-common.profile
# For more informations see profile.template
# For more information, see profile.template
# Ignore something that is in the included profile
# Ignoring option(s) from the included profile
#ignore net none
#ignore private-bin
#ignore seccomp
#...
# Additional noblacklisting (if needed)
# Additional noblacklisting (when needed)
#noblacklist PATH
# Additional allow includes (if needed)
# Additional allow includes (when needed)
# Additional blacklisting (if needed)
# Additional blacklisting (when needed)
#blacklist PATH
# Additional whitelisting (if needed)
# Additional whitelisting (when needed)
#NOTE: never use mkdir/mkfile when 'private' is set (see https://github.com/netblue30/firejail/issues/903)
#mkdir PATH
##mkfile PATH
#whitelist PATH
# Additional options (if needed)
# Additional options (when needed)
# Additional private-options (if needed)
# Add programs to private-bin (if needed)
# Additional private-options (when needed)
# Add programs to private-bin (when needed)
#private-bin PROGRAMS
# Add files to private-etc (if needed)
# Add files to private-etc (when needed)
#private-etc FILES
# Additional special options (if needed)
# Additional special options (when needed)
# Redirect
include PROFILE.profile