github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

apparmor

Browse source
This commit is contained in:
netblue30 2020-03-23 14:32:49 -04:00
parent 5b081b6981
commit 255697b15a
15 changed files with 68 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
etc/gnome-books.profile
View file

@ -23,7 +23,9 @@ include disable-xdg.inc
include whitelist-var-common.inc
apparmor
caps.drop all
net none
netfilter
no3d
nodvd

1
etc/gnome-characters.profile
View file

@ -22,6 +22,7 @@ include whitelist-common.inc
include whitelist-usr-share-common.inc
include whitelist-var-common.inc
apparmor
caps.drop all
machine-id
net none

2
etc/gnome-font-viewer.profile
View file

@ -17,7 +17,9 @@ include disable-xdg.inc
include whitelist-var-common.inc
apparmor
caps.drop all
net none
netfilter
no3d
nodvd

6
etc/gnome-music.profile
View file

@ -23,6 +23,7 @@ include disable-xdg.inc
include whitelist-var-common.inc
apparmor
caps.drop all
netfilter
no3d
@ -37,8 +38,9 @@ seccomp
shell none
tracelog
private-bin env,gio-launch-desktop,gnome-music,python*,yelp
# private-bin calls a file manager - whatever is installed!
#private-bin env,gio-launch-desktop,gnome-music,python*,yelp
private-dev
private-etc alternatives,asound.conf,fonts,machine-id,pulse
private-etc alternatives,asound.conf,fonts,machine-id,pulse,fonts,xdg,gtk-3.0,dconf,selinux,
private-tmp

1
etc/gnome-photos.profile
View file

@ -19,6 +19,7 @@ include disable-programs.inc
include whitelist-var-common.inc
apparmor
caps.drop all
netfilter
nodvd

3
etc/gnome-recipes.profile
View file

@ -26,7 +26,8 @@ include whitelist-common.inc
include whitelist-usr-share-common.inc
include whitelist-var-common.inc
caps.drop all
apparmor
aps.drop all
ipc-namespace
machine-id
netfilter

41
etc/kmplayer.profile Normal file
View file

@ -0,0 +1,41 @@
# Firejail profile for mplayer
# Description: mplayer KDE GUI (movie player)
# This file is overwritten after every install/update
# Persistent local customizations
include kmplayer.local
# Persistent global definitions
include globals.local
noblacklist ${HOME}/.config/kmplayerrc
noblacklist ${HOME}/.kde/share/config/kmplayerrc
noblacklist ${HOME}/.local/share/kmplayer
noblacklist ${MUSIC}
noblacklist ${VIDEOS}
include disable-common.inc
include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-passwdmgr.inc
include disable-programs.inc
include disable-xdg.inc
include whitelist-usr-share-common.inc
include whitelist-var-common.inc
apparmor
caps.drop all
netfilter
nogroups
nonewprivs
noroot
nou2f
protocol unix,inet,inet6,netlink
seccomp
shell none
# private-bin kmplayer,mplayer
private-cache
private-dev
private-tmp

2
etc/pitivi.profile
View file

@ -22,8 +22,10 @@ include disable-programs.inc
include whitelist-var-common.inc
apparmor
caps.drop all
ipc-namespace
net none
netfilter
nodvd
nogroups

4
etc/rhythmbox.profile
View file

@ -28,7 +28,7 @@ whitelist /usr/share/libquvi-scripts
include whitelist-usr-share-common.inc
include whitelist-var-common.inc
# apparmor - makes settings immutable
apparmor
caps.drop all
netfilter
# nodbus - makes settings immutable
@ -38,7 +38,7 @@ noroot
notv
nou2f
novideo
protocol unix,inet,inet6
protocol unix,inet,inet6,netlink
seccomp
shell none
tracelog

4
etc/ristretto.profile
View file

@ -17,7 +17,11 @@ include disable-interpreters.inc
include disable-passwdmgr.inc
include disable-programs.inc
include whitelist-var-common.inc
apparmor
caps.drop all
net none
netfilter
no3d
nodvd

1
etc/shellcheck.profile
View file

@ -23,6 +23,7 @@ whitelist /usr/share/shellcheck
include whitelist-usr-share-common.inc
include whitelist-var-common.inc
apparmor
caps.drop all
ipc-namespace
machine-id

3
etc/simutrans.profile
View file

@ -10,6 +10,7 @@ noblacklist ${HOME}/.simutrans
include disable-common.inc
include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-passwdmgr.inc
include disable-programs.inc
@ -17,7 +18,9 @@ include disable-programs.inc
mkdir ${HOME}/.simutrans
whitelist ${HOME}/.simutrans
include whitelist-common.inc
include whitelist-var-common.inc
apparmor
caps.drop all
net none
nodbus

1
etc/smtube.profile
View file

@ -28,6 +28,7 @@ whitelist /usr/share/smtube
include whitelist-usr-share-common.inc
include whitelist-var-common.inc
apparmor
caps.drop all
netfilter
nodvd

1
etc/widelands.profile
View file

@ -21,6 +21,7 @@ whitelist ${HOME}/.widelands
include whitelist-common.inc
include whitelist-var-common.inc
apparmor
caps.drop all
ipc-namespace
netfilter

1
etc/xcalc.profile
View file

@ -15,6 +15,7 @@ include disable-xdg.inc
include whitelist-var-common.inc
apparmor
caps.drop all
net none
no3d