diff --git a/Makefile.in b/Makefile.in index 0baad25cc..952dfd376 100644 --- a/Makefile.in +++ b/Makefile.in @@ -108,6 +108,9 @@ realinstall: install -c -m 0644 etc/filezilla.profile $(DESTDIR)/$(sysconfdir)/firejail/. install -c -m 0644 etc/fbreader.profile $(DESTDIR)/$(sysconfdir)/firejail/. install -c -m 0644 etc/spotify.profile $(DESTDIR)/$(sysconfdir)/firejail/. + install -c -m 0644 etc/steam.profile $(DESTDIR)/$(sysconfdir)/firejail/. + install -c -m 0644 etc/skype.profile $(DESTDIR)/$(sysconfdir)/firejail/. + install -c -m 0644 etc/wine.profile $(DESTDIR)/$(sysconfdir)/firejail/. bash -c "if [ ! -f $(DESTDIR)/$(sysconfdir)/firejail/login.users ]; then install -c -m 0644 etc/login.users $(DESTDIR)/$(sysconfdir)/firejail/.; fi;" # man pages rm -f firejail.1.gz diff --git a/README.md b/README.md index 3d82f29a7..b94f11299 100644 --- a/README.md +++ b/README.md @@ -82,4 +82,9 @@ Recognized values: unix, inet, inet6, netlink and packet. Example: $ firejail --protocol=unix,inet,inet6 firefox ````` +### New security profiles + +Steam, Skype, Wine + + diff --git a/etc/wine.profile b/etc/wine.profile new file mode 100644 index 000000000..3319f912f --- /dev/null +++ b/etc/wine.profile @@ -0,0 +1,11 @@ +# wine profile +noblacklist ${HOME}/.steam +noblacklist ${HOME}/.local/share/steam +include /etc/firejail/disable-mgmt.inc +include /etc/firejail/disable-secret.inc +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-history.inc +caps.drop all +netfilter +noroot +seccomp