github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

merged 0ad profile from Fred-Barclay

Browse source
This commit is contained in:
netblue30 2016-04-15 08:29:50 -04:00
parent 53d8a86e68
commit 5ce8a913a4
7 changed files with 38 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

1
Makefile.in
View file

@ -163,6 +163,7 @@ realinstall:
install -c -m 0644 .etc/palemoon.profile $(DESTDIR)/$(sysconfdir)/firejail/.
install -c -m 0644 .etc/icedove.profile $(DESTDIR)/$(sysconfdir)/firejail/.
install -c -m 0644 .etc/abrowser.profile $(DESTDIR)/$(sysconfdir)/firejail/.
install -c -m 0644 .etc/0ad.profile $(DESTDIR)/$(sysconfdir)/firejail/.
sh -c "if [ ! -f $(DESTDIR)/$(sysconfdir)/firejail/login.users ]; then install -c -m 0644 etc/login.users $(DESTDIR)/$(sysconfdir)/firejail/.; fi;"
sh -c "if [ ! -f $(DESTDIR)/$(sysconfdir)/firejail/firejail.config ]; then install -c -m 0644 etc/firejail.config $(DESTDIR)/$(sysconfdir)/firejail/.; fi;"
rm -fr .etc

1
README
View file

@ -24,6 +24,7 @@ Fred-Barclay (https://github.com/Fred-Barclay)
- added Vivaldi, Atril profiles
- added PaleMoon profile
- split Icedove and Thunderbird profiles
- added 0ad profile
avoidr (https://github.com/avoidr)
- whitelist fix
- recently-used.xbel fix

2
README.md
View file

@ -281,5 +281,5 @@ $ man firejail-profile
## New security profiles
lxterminal, Epiphany, cherrytree, Polari, Vivaldi, Atril, qutebrowser, SlimJet, Battle for Wesnoth, Hedgewars, qTox,
OpenSSH client, OpenBox window manager, Dillo, cmus, dnsmasq, PaleMoon, Icedove, abrowser
OpenSSH client, OpenBox window manager, Dillo, cmus, dnsmasq, PaleMoon, Icedove, abrowser, 0ad

2
RELNOTES
View file

@ -18,7 +18,7 @@ firejail (0.9.40-rc1) baseline; urgency=low
* new profiles: lxterminal, Epiphany, cherrytree, Polari, Vivaldi, Atril
* new profiles: qutebrowser, SlimJet, Battle for Wesnoth, Hedgewars
* new profiles: qTox, OpenSSH client, OpenBox, Dillo, cmus, dnsmasq
* new profiles: PaleMoon, Icedove
* new profiles: PaleMoon, Icedove, 0ad
* build rpm packages using "make rpms"
* bugfixes
-- netblue30 <netblue30@yahoo.com> Sun, 3 Apr 2016 08:00:00 -0500

30
etc/0ad.profile Normal file
View file

@ -0,0 +1,30 @@
# Firejail profile for 0ad.
noblacklist ~/.config/0ad
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc
# Call these options
caps.drop all
seccomp
protocol unix,inet,inet6,netlink
netfilter
tracelog
noroot
# Whitelists
noblacklist ~/.cache/0ad
mkdir ~/.cache
mkdir ~/.cache/0ad
whitelist ~/.cache/0ad
mkdir ~/.config
mkdir ~/.config/0ad
whitelist ~/.config/0ad
noblacklist ~/.local/share/0ad
mkdir ~/.local
mkdir ~/.local/share
mkdir ~/.local/share/0ad
whitelist ~/.local/share/0ad

3
etc/disable-programs.inc
View file

@ -53,6 +53,7 @@ blacklist ${HOME}/.TelegramDesktop
blacklist ${HOME}/.hedgewars
blacklist ${HOME}/.steam
blacklist ${HOME}/.config/wesnoth
blacklist ${HOME}/.config/0ad
# Cryptocoins
blacklist ${HOME}/.*coin
@ -81,6 +82,7 @@ blacklist ${HOME}/.cache/thunderbird
blacklist ${HOME}/.cache/icedove
blacklist ${HOME}/.cache/transmission
blacklist ${HOME}/.cache/wesnoth
blacklist ${HOME}/.cache/0ad
# share
blacklist ${HOME}/.local/share/epiphany
@ -88,3 +90,4 @@ blacklist ${HOME}/.local/share/mupen64plus
blacklist ${HOME}/.local/share/spotify
blacklist ${HOME}/.local/share/steam
blacklist ${HOME}/.local/share/wesnoth
blacklist ${HOME}/.local/share/0ad

1
platform/debian/conffiles
View file

@ -82,3 +82,4 @@
/etc/firejail/dnsmasq.profile
/etc/firejail/palemoon.profile
/etc/firejail/abrowser.profile
/etc/firejail/0ad.profile