private-etc: libreoffice, audacity, forzen-bubble, transmission, md5sum/sha512sum, more sysutils testing, fix electron-hardened.inc.profile

This commit is contained in:
netblue30 2023-02-08 17:50:44 -05:00
parent 633016f005
commit 7176e6324d
11 changed files with 73 additions and 1 deletions

View file

@ -50,6 +50,7 @@ tracelog
private-bin audacity
private-dev
private-etc @x11,gcrypt
private-tmp
# problems on Fedora 27

View file

@ -7,4 +7,4 @@ include electron-hardened.inc.local
#include globals.local
# Redirect
include chrome-common-hardened.inc.profile
include chromium-common-hardened.inc.profile

View file

@ -22,6 +22,7 @@ mkdir ${HOME}/.frozen-bubble
whitelist ${HOME}/.frozen-bubble
include whitelist-common.inc
include whitelist-runuser-common.inc
whitelist /usr/share/games
include whitelist-usr-share-common.inc
include whitelist-var-common.inc
@ -42,6 +43,7 @@ tracelog
disable-mnt
# private-bin frozen-bubble
private-dev
private-etc @games,@x11
private-tmp
dbus-user none

View file

@ -45,6 +45,7 @@ disable-mnt
private-bin gnome-calculator
private-cache
private-dev
private-etc @x11
#private-lib gdk-pixbuf-2.*,gio,girepository-1.*,gvfs,libgconf-2.so.*,libgnutls.so.*,libproxy.so.*,librsvg-2.so.*,libxml2.so.*
private-tmp

View file

@ -48,6 +48,7 @@ x11 none
# Add the next line to your hasher-common.local if you don't need to hash files in ~/.cache.
#private-cache
private-dev
private-etc
# Add the next line to your hasher-common.local if you don't need to hash files in /tmp.
#private-tmp

View file

@ -50,6 +50,7 @@ tracelog
#private-bin libreoffice,sh,uname,dirname,grep,sed,basename,ls
private-cache
private-dev
private-etc @tls-ca,@x11,cups,gnupg,libreoffice,papersize,ssh
private-tmp
dbus-system none

View file

@ -44,6 +44,7 @@ tracelog
private-cache
private-dev
private-etc @tls-ca,@x11
private-tmp
dbus-user none

View file

@ -519,6 +519,7 @@ matrix-mirage
mattermost-desktop
mcabber
mcomix
md5sum
mediainfo
mediathekview
megaglest
@ -736,6 +737,11 @@ seahorse-tool
seamonkey
seamonkey-bin
secret-tool
sha1sum
sha224sum
sha256sum
sha348sum
sha512sum
shellcheck
shortwave
shotcut
@ -775,6 +781,7 @@ straw-viewer
strings
studio.sh
subdownloader
sum
supertux2
supertuxkart
surf

21
test/sysutils/md5sum.exp Executable file
View file

@ -0,0 +1,21 @@
#!/usr/bin/expect -f
# This file is part of Firejail project
# Copyright (C) 2014-2022 Firejail Authors
# License GPL v2
set timeout 10
spawn $env(SHELL)
match_max 100000
send -- "firejail md5sum ../../COPYING\r"
expect {
timeout {puts "TESTING ERROR 0\n";exit}
"b234ee"
}
expect {
timeout {puts "TESTING ERROR 1\n";exit}
"COPYING"
}
after 500
puts "\nall done\n"

21
test/sysutils/sha512sum.exp Executable file
View file

@ -0,0 +1,21 @@
#!/usr/bin/expect -f
# This file is part of Firejail project
# Copyright (C) 2014-2022 Firejail Authors
# License GPL v2
set timeout 10
spawn $env(SHELL)
match_max 100000
send -- "firejail sha512sum ../../COPYING\r"
expect {
timeout {puts "TESTING ERROR 0\n";exit}
"aee80b1f"
}
expect {
timeout {puts "TESTING ERROR 1\n";exit}
"COPYING"
}
after 500
puts "\nall done\n"

View file

@ -7,6 +7,22 @@ export MALLOC_CHECK_=3
export MALLOC_PERTURB_=$(($RANDOM % 255 + 1))
export LC_ALL=C
if command -v md5sum
then
echo "TESTING: md5sum"
./md5sum.exp
else
echo "TESTING SKIP: md5sum not found"
fi
if command -v sha512sum
then
echo "TESTING: sha512sum"
./sha512sum.exp
else
echo "TESTING SKIP: sha512sum not found"
fi
if command -v cpio
then
echo "TESTING: cpio"