KeePassXC profile

This commit is contained in:
Fred Barclay 2017-03-29 20:28:58 -05:00
parent c3c64987d5
commit 5a982a1e5e
No known key found for this signature in database
GPG key ID: 7338CE369A928102
7 changed files with 43 additions and 8 deletions

2
README
View file

@ -96,6 +96,8 @@ BogDan Vatra (https://github.com/bog-dan-ro)
Bruno Nova (https://github.com/brunonova)
- whitelist fix
- bash arguments fix
BytesTuner (https://github.com/BytesTuner)
- provided keepassxc profile
Cat (https://github.com/ecat3)
- prevent tmux connecting to an existing session
creideiki (https://github.com/creideiki)

View file

@ -195,4 +195,4 @@ goobox, gpa, gpg, gpg-agent, highlight, img2txt, k3b, kate, lynx, mediainfo, nau
simple-scan, skanlite, ssh-agent, tracker, transmission-cli, transmission-show, w3m, xfburn, xpra, wget,
xed, pluma, Cryptocat, Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5,
PDFSam, Pithos, Xonotic, wireshark, keepassx2, QupZilla, FossaMail, Uzbl browser, xmms, iridium browser,
Kino, Thunar, Geeqie, Engrampa, Scribus, mousepad, gpicview
Kino, Thunar, Geeqie, Engrampa, Scribus, mousepad, gpicview, keepassxc

View file

@ -41,7 +41,7 @@ firejail (0.9.45) baseline; urgency=low
* new profiles: Gnome Contacts, JD-GUI, Lollypop, MultiMC5, PDFSam, Pithos,
* new profies: Xonotic, wireshark, keepassx2, QupZilla, FossaMail,
* new profiles: Uzbl browser, iridium browser, Thunar, Geeqie, Engrampa
* new profiles: Scribus, mousepad, gpicview
* new profiles: Scribus, mousepad, gpicview, keepassxc
* bugfixes
-- netblue30 <netblue30@yahoo.com> Sun, 23 Oct 2016 08:00:00 -0500

View file

@ -2,10 +2,12 @@
# Persistent customizations should go in a .local file.
include /etc/firejail/disable-passwdmgr.local
blacklist ${HOME}/.lastpass
blacklist ${HOME}/.keepassx
blacklist ${HOME}/.keepass
blacklist ${HOME}/.password-store
blacklist ${HOME}/.config/keepassx
blacklist ${HOME}/.config/keepass
blacklist ${HOME}/.config/KeePass
blacklist ${HOME}/.config/keepass
blacklist ${HOME}/.config/keepassx
blacklist ${HOME}/.config/keepassxc
blacklist ${HOME}/.keepass
blacklist ${HOME}/.keepassx
blacklist ${HOME}/.keepassxc
blacklist ${HOME}/.lastpass
blacklist ${HOME}/.password-store

29
etc/keepassxc.profile Normal file
View file

@ -0,0 +1,29 @@
# This file is overwritten during software install.
# Persistent customizations should go in a .local file.
include /etc/firejail/keepassxc.local
# Firejail profile for KeepassXC
noblacklist ${HOME}/.config/keepassxc
noblacklist ${HOME}/.keepassxc
noblacklist ${HOME}/.*kdbx
noblacklist ${HOME}/.*kdb
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-programs.inc
include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
caps.drop all
net none
nogroups
nonewprivs
noroot
nosound
#protocol unix
seccomp
shell none
private-bin keepassxc
#private-etc fonts
#private-dev
private-tmp

View file

@ -113,6 +113,7 @@
/etc/firejail/keepass2.profile
/etc/firejail/keepassx.profile
/etc/firejail/keepassx2.profile
/etc/firejail/keepassxc.profile
/etc/firejail/kmail.profile
/etc/firejail/konversation.profile
/etc/firejail/less.profile

View file

@ -193,6 +193,7 @@ keepass
keepass2
keepassx
keepassx2
keepassxc
mousepad
pluma
Thunar