Merge pull request #53 from sarneaud/noblacklist

Noblacklist
This commit is contained in:
netblue30 2015-09-01 08:27:02 -04:00
commit 38f13e822b
10 changed files with 81 additions and 29 deletions

View file

@ -1,7 +1,8 @@
# Chromium browser profile
noblacklist ${HOME}/.config/chromium
include /etc/firejail/disable-mgmt.inc
include /etc/firejail/disable-secret.inc
include /etc/firejail/disable-common.inc chromium
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-history.inc
netfilter

View file

@ -1,7 +1,9 @@
# FileZilla profile
noblacklist ${HOME}/.filezilla
noblacklist ${HOME}/.config/filezilla
include /etc/firejail/disable-mgmt.inc
include /etc/firejail/disable-secret.inc
include /etc/firejail/disable-common.inc .filezilla
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-history.inc
caps.drop all
seccomp

View file

@ -1,7 +1,8 @@
# Firejail profile for Mozilla Firefox (Iceweasel in Debian)
noblacklist ${HOME}/.mozilla
include /etc/firejail/disable-mgmt.inc
include /etc/firejail/disable-secret.inc
include /etc/firejail/disable-common.inc .mozilla
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-history.inc
caps.drop all
seccomp

View file

@ -1,7 +1,8 @@
# Midory browser profile
# Midori browser profile
noblacklist ${HOME}/.config/midori
include /etc/firejail/disable-mgmt.inc
include /etc/firejail/disable-secret.inc
include /etc/firejail/disable-common.inc midori
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-history.inc
caps.drop all
seccomp

View file

@ -1,7 +1,8 @@
# Chromium browser profile
noblacklist ${HOME}/.config/opera
include /etc/firejail/disable-mgmt.inc
include /etc/firejail/disable-secret.inc
include /etc/firejail/disable-common.inc opera
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-history.inc
netfilter
noroot

View file

@ -1,6 +1,8 @@
# generic server profile
# it allows /sbin and /usr/sbin directories - this is where servers are installed
include /etc/firejail/disable-mgmt.inc sbin
noblacklist /sbin
noblacklist /usr/sbin
include /etc/firejail/disable-mgmt.inc
private
private-dev
seccomp